| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·77ca0ce45f74de8cdd25f5d39b27f1ac·153220·admin·optional·ssg-applications_0.1.74-1_all.deb |
| 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb | 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb |
| 3 | ·802fa03fbed7a877b50c3006025624be·2807660·admin·optional·ssg-debderived_0.1.74-1_all.deb | ||
| 4 | ·a06da540053106569c995a063c97b741·1232136·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | · | 3 | ·75aee5de0ea7abcc8f4225260b2edb5f·2808260·admin·optional·ssg-debderived_0.1.74-1_all.deb |
| 4 | ·82fb0b84b1c4ccc72665d64327d2836f·1232124·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | ·c0911195f48d7d2748819a457533508e·32359996·admin·optional·ssg-nondebian_0.1.74-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····172 | 2 | -rw-r--r--···0········0········0·····1724·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···151 | 3 | -rw-r--r--···0········0········0···151304·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038050:·6f66·2032·3032·3 | 00038050:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch | 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:google:chromium-browser | 54 | ····*·cpe:/a:google:chromium-browser |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m | 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m |
| 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 | 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 |
| 62 | rules | 62 | rules |
| 63 | Group ·Chromium· Group·contains·37·rules | 63 | Group ·Chromium· Group·contains·37·rules |
| 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and | 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038010:·6173·206f·6620·3230·323 | 00038010:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service | 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service |
| 58 | Group·contains·3·groups·and·15·rules | 58 | Group·contains·3·groups·and·15·rules |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038010:·3 | 00038010:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d20:·6173·206f·6620·3230·323 | 00037d20:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/a:mozilla:firefox | 41 | ····*·cpe:/a:mozilla:firefox |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group | 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group |
| 49 | and·9·rules | 49 | and·9·rules |
| 50 | Group ·Firefox· Group·contains·9·rules | 50 | Group ·Firefox· Group·contains·9·rules |
| 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web | 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web |
| Offset 14332, 15 lines modified | Offset 14332, 15 lines modified | ||
| 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038020:·3 | 00038020:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" | 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:mozilla:firefox | 54 | ····*·cpe:/a:mozilla:firefox |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d | 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d |
| 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups | 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups |
| 63 | and·34·rules | 63 | and·34·rules |
| 64 | Group ·Firefox· Group·contains·1·group·and·34·rules | 64 | Group ·Firefox· Group·contains·1·group·and·34·rules |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 1666, 15 lines modified | Offset 1666, 15 lines modified | ||
| 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1668 | ··········</xccdf-1.2:check> | 1668 | ··········</xccdf-1.2:check> |
| 1669 | ········</xccdf-1.2:Rule> | 1669 | ········</xccdf-1.2:Rule> |
| 1670 | ······</xccdf-1.2:Group> | 1670 | ······</xccdf-1.2:Group> |
| 1671 | ····</xccdf-1.2:Benchmark> | 1671 | ····</xccdf-1.2:Benchmark> |
| 1672 | ··</ds:component> | 1672 | ··</ds:component> |
| 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-0 | 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1675 | ······<oval-def:generator> | 1675 | ······<oval-def:generator> |
| 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 1678 | ········<oval:schema_version>5.11</oval:schema_version> | 1678 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1680 | ······</oval-def:generator> | 1680 | ······</oval-def:generator> |
| Offset 2530, 360 lines modified | Offset 2530, 360 lines modified | ||
| 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2534 | ······</oval-def:variables> | 2534 | ······</oval-def:variables> |
| 2535 | ····</oval-def:oval_definitions> | 2535 | ····</oval-def:oval_definitions> |
| 2536 | ··</ds:component> | 2536 | ··</ds:component> |
| 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-0 | 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2538 | ····<ocil:ocil> | 2538 | ····<ocil:ocil> |
| 2539 | ······<ocil:generator> | 2539 | ······<ocil:generator> |
| 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2544 | ······</ocil:generator> | 2544 | ······</ocil:generator> |
| 2545 | ······<ocil:questionnaires> | 2545 | ······<ocil:questionnaires> |
| 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 2547 | ··········<ocil:title>Disable· | 2547 | ··········<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 2548 | ··········<ocil:actions> | 2548 | ··········<ocil:actions> |
| 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 2550 | ··········</ocil:actions> | 2550 | ··········</ocil:actions> |
| 2551 | ········</ocil:questionnaire> | 2551 | ········</ocil:questionnaire> |
| 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_se | 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 2553 | ··········<ocil:title>Disable·Se | 2553 | ··········<ocil:title>Disable·Session·Cookies</ocil:title> |
| 2554 | ··········<ocil:actions> | 2554 | ··········<ocil:actions> |
| 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_se | 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 2556 | ··········</ocil:actions> | 2556 | ··········</ocil:actions> |
| 2557 | ········</ocil:questionnaire> | 2557 | ········</ocil:questionnaire> |
| 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 2559 | ··········<ocil:title> | 2559 | ··········<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 2560 | ··········<ocil:actions> | 2560 | ··········<ocil:actions> |
| 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 2562 | ··········</ocil:actions> | 2562 | ··········</ocil:actions> |
| 2563 | ········</ocil:questionnaire> | 2563 | ········</ocil:questionnaire> |
| 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_autocomplete_ocil:questionnaire:1"> |
| 2565 | ··········<ocil:title>Disable· | 2565 | ··········<ocil:title>Disable·the·AutoFill·Feature</ocil:title> |
| 2566 | ··········<ocil:actions> | 2566 | ··········<ocil:actions> |
| 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_autocomplete_action:testaction:1</ocil:test_action_ref> |
| 2568 | ··········</ocil:actions> | 2568 | ··········</ocil:actions> |
| 2569 | ········</ocil:questionnaire> | 2569 | ········</ocil:questionnaire> |
| 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 2571 | ··········<ocil:title> | 2571 | ··········<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 2572 | ··········<ocil:actions> | 2572 | ··········<ocil:actions> |
| 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> |
| 2574 | ··········</ocil:actions> | 2574 | ··········</ocil:actions> |
| 2575 | ········</ocil:questionnaire> | 2575 | ········</ocil:questionnaire> |
| 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_autoc | 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 2577 | ··········<ocil:title>Disable·t | 2577 | ··········<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 2578 | ··········<ocil:actions> | 2578 | ··········<ocil:actions> |
| 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_autoc | 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 2580 | ··········</ocil:actions> | 2580 | ··········</ocil:actions> |
| 2581 | ········</ocil:questionnaire> | 2581 | ········</ocil:questionnaire> |
| 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_extension_whitelist_ocil:questionnaire:1"> |
| 2583 | ··········<ocil:title>En | 2583 | ··········<ocil:title>Enable·Only·Approved·Extensions</ocil:title> |
| 2584 | ··········<ocil:actions> | 2584 | ··········<ocil:actions> |
| 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_extension_whitelist_action:testaction:1</ocil:test_action_ref> |
| 2586 | ··········</ocil:actions> | 2586 | ··········</ocil:actions> |
| 2587 | ········</ocil:questionnaire> | 2587 | ········</ocil:questionnaire> |
| 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_plugins_require_authorization_ocil:questionnaire:1"> |
| 2589 | ··········<ocil:title> | 2589 | ··········<ocil:title>Require·Outdated·Plugins·to·be·Authorized</ocil:title> |
| 2590 | ··········<ocil:actions> | 2590 | ··········<ocil:actions> |
| 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_plugins_require_authorization_action:testaction:1</ocil:test_action_ref> |
| 2592 | ··········</ocil:actions> | 2592 | ··········</ocil:actions> |
| 2593 | ········</ocil:questionnaire> | 2593 | ········</ocil:questionnaire> |
| 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_check_cert_revocation_ocil:questionnaire:1"> |
| 2595 | ··········<ocil:title> | 2595 | ··········<ocil:title>Enable·Online·OCSP/CRL·Certificate·Checks</ocil:title> |
| 2596 | ··········<ocil:actions> | 2596 | ··········<ocil:actions> |
| 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_check_cert_revocation_action:testaction:1</ocil:test_action_ref> |
| 2598 | ··········</ocil:actions> | 2598 | ··········</ocil:actions> |
| 2599 | ········</ocil:questionnaire> | 2599 | ········</ocil:questionnaire> |
| 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 2601 | ··········<ocil:title>D | 2601 | ··········<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 2602 | ··········<ocil:actions> | 2602 | ··········<ocil:actions> |
| 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 2604 | ··········</ocil:actions> | 2604 | ··········</ocil:actions> |
| 2605 | ········</ocil:questionnaire> | 2605 | ········</ocil:questionnaire> |
| 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_cloud_print_sharing_ocil:questionnaire:1"> |
| 2607 | ··········<ocil:title> | 2607 | ··········<ocil:title>Disable·Cloud·Print·Sharing</ocil:title> |
| 2608 | ··········<ocil:actions> | 2608 | ··········<ocil:actions> |
| 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_cloud_print_sharing_action:testaction:1</ocil:test_action_ref> |
| 2610 | ··········</ocil:actions> | 2610 | ··········</ocil:actions> |
| 2611 | ········</ocil:questionnaire> | 2611 | ········</ocil:questionnaire> |
| 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> | 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 2613 | ··········<ocil:title> | 2613 | ··········<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 2614 | ··········<ocil:actions> | 2614 | ··········<ocil:actions> |
| Max diff block lines reached; 67956/80776 bytes (84.13%) of diff not shown. | |||
| Offset 3, 351 lines modified | Offset 3, 351 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disable· | 11 | ······<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_se | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable·Se | 17 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_se | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_autocomplete_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable· | 29 | ······<ocil:title>Disable·the·AutoFill·Feature</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_autocomplete_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_autoc | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable·t | 41 | ······<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_autoc | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_extension_whitelist_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>En | 47 | ······<ocil:title>Enable·Only·Approved·Extensions</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_extension_whitelist_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_plugins_require_authorization_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Require·Outdated·Plugins·to·be·Authorized</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_plugins_require_authorization_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_check_cert_revocation_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Online·OCSP/CRL·Certificate·Checks</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_check_cert_revocation_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>D | 65 | ······<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cloud_print_sharing_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Disable·Cloud·Print·Sharing</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_cloud_print_sharing_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable· | 83 | ······<ocil:title>Disable·Incognito·Mode</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_blacklist_extension_installation_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Disable·All·Extensions·by·Default</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_blacklist_extension_installation_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cleartext_passwords_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable· | 95 | ······<ocil:title>Disable·Use·of·Cleartext·Passwords</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_cleartext_passwords_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·Chromium·Password·Manager</ocil:title> | 101 | ······<ocil:title>Disable·Chromium·Password·Manager</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 107 | ······<ocil:title>Disable·Network·Prediction</ocil:title> |
| 108 | ······<ocil:actions> | ||
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> | ||
| 110 | ······</ocil:actions> | ||
| 111 | ····</ocil:questionnaire> | ||
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> | ||
| 113 | ······<ocil:title>Disable·All·Plugins·by·Default</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_block_plugins_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Block·Plugins·by·Default</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_block_plugins_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 119 | ······<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 126 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 129 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 59193/71793 bytes (82.45%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 113, 24 lines modified | Offset 113, 24 lines modified | ||
| 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 119 | ······<cpe-lang:platform-specification> | 119 | ······<cpe-lang:platform-specification> |
| 120 | ········<cpe-lang:platform·id="eks-node"> | ||
| 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 123 | ··········</cpe-lang:logical-test> | ||
| 124 | ········</cpe-lang:platform> | ||
| 125 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 120 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="eks-node"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | ||
| 129 | ········</cpe-lang:platform> | ||
| 130 | ······</cpe-lang:platform-specification> | 130 | ······</cpe-lang:platform-specification> |
| 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 135 | ······<xccdf-1.2:metadata> | 135 | ······<xccdf-1.2:metadata> |
| 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 1490, 15 lines modified | Offset 1490, 15 lines modified | ||
| 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1491 | ············</xccdf-1.2:check> | 1491 | ············</xccdf-1.2:check> |
| 1492 | ··········</xccdf-1.2:Rule> | 1492 | ··········</xccdf-1.2:Rule> |
| 1493 | ········</xccdf-1.2:Group> | 1493 | ········</xccdf-1.2:Group> |
| 1494 | ······</xccdf-1.2:Group> | 1494 | ······</xccdf-1.2:Group> |
| 1495 | ····</xccdf-1.2:Benchmark> | 1495 | ····</xccdf-1.2:Benchmark> |
| 1496 | ··</ds:component> | 1496 | ··</ds:component> |
| 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-0 | 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1499 | ······<oval-def:generator> | 1499 | ······<oval-def:generator> |
| 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 1502 | ········<oval:schema_version>5.11</oval:schema_version> | 1502 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1504 | ······</oval-def:generator> | 1504 | ······</oval-def:generator> |
| Offset 2111, 250 lines modified | Offset 2111, 250 lines modified | ||
| 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2114 | ········</oval-def:local_variable> | 2114 | ········</oval-def:local_variable> |
| 2115 | ······</oval-def:variables> | 2115 | ······</oval-def:variables> |
| 2116 | ····</oval-def:oval_definitions> | 2116 | ····</oval-def:oval_definitions> |
| 2117 | ··</ds:component> | 2117 | ··</ds:component> |
| 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-0 | 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2119 | ····<ocil:ocil> | 2119 | ····<ocil:ocil> |
| 2120 | ······<ocil:generator> | 2120 | ······<ocil:generator> |
| 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2125 | ······</ocil:generator> | 2125 | ······</ocil:generator> |
| 2126 | ······<ocil:questionnaires> | 2126 | ······<ocil:questionnaires> |
| 2127 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> | ||
| 2128 | ··········<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 2129 | ··········<ocil:actions> | ||
| 2130 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> | ||
| 2131 | ··········</ocil:actions> | ||
| 2132 | ········</ocil:questionnaire> | ||
| 2133 | ········<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> | ||
| 2134 | ··········<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> | ||
| 2135 | ··········<ocil:actions> | ||
| 2136 | ············<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> | ||
| 2137 | ··········</ocil:actions> | ||
| 2138 | ········</ocil:questionnaire> | ||
| 2139 | ········<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> | ||
| 2140 | ··········<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> | ||
| 2141 | ··········<ocil:actions> | ||
| 2142 | ············<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> | ||
| 2143 | ··········</ocil:actions> | ||
| 2144 | ········</ocil:questionnaire> | ||
| 2145 | ········<ocil:questionnaire·id="ocil:ssg-file_groupowner_k | 2127 | ········<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 2146 | ··········<ocil:title>Verify·Group·Who·Owns·The· | 2128 | ··········<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 2147 | ··········<ocil:actions> | ||
| 2148 | ············<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> | ||
| 2149 | ··········</ocil:actions> | ||
| 2150 | ········</ocil:questionnaire> | ||
| 2151 | ········<ocil:questionnaire·id="ocil:ssg-fargate_ocil:questionnaire:1"> | ||
| 2152 | ··········<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> | ||
| 2153 | ··········<ocil:actions> | 2129 | ··········<ocil:actions> |
| 2154 | ············<ocil:test_action_ref>ocil:ssg-f | 2130 | ············<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 2155 | ··········</ocil:actions> | 2131 | ··········</ocil:actions> |
| 2156 | ········</ocil:questionnaire> | 2132 | ········</ocil:questionnaire> |
| 2157 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_ | 2133 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| Max diff block lines reached; 86257/96561 bytes (89.33%) of diff not shown. | |||
| Offset 3, 241 lines modified | Offset 3, 241 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_k | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Group·Who·Owns·The· | 11 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-fargate_ocil:questionnaire:1"> | ||
| 35 | ······<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> | ||
| 36 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-f | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>kubelet·-·En | 17 | ······<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> |
| 42 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 19 | ········<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 23 | ······<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 48 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 53 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·that·application·Namespaces·have·Network·Policies·defined.</ocil:title> | ||
| 54 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_namespaces_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> | 35 | ······<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> |
| 60 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 41 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 66 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 47 | ······<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> |
| 72 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 53 | ······<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 78 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-iam_integration_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> |
| 84 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-configure_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 65 | ······<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 90 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-configure_ | 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-i | 70 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 96 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-i | 73 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_cert_rotation_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 77 | ······<ocil:title>kubelet·-·Enable·Certificate·Rotation</ocil:title> |
| 102 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> | 82 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> | 83 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 108 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> | 85 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_k | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·User·Who·Owns·The· | 89 | ······<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 114 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_owner_k | 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> | ||
| 95 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> | ||
| 96 | ······<ocil:actions> | ||
| 97 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> | ||
| 98 | ······</ocil:actions> | ||
| 99 | ····</ocil:questionnaire> | ||
| 118 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | 101 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_ | 103 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| Max diff block lines reached; 74395/85096 bytes (87.42%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 24 lines modified | Offset 72, 24 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="eks-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="eks-node"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ··</cpe-lang:platform-specification> | 89 | ··</cpe-lang:platform-specification> |
| 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 94 | ··<xccdf-1.2:metadata> | 94 | ··<xccdf-1.2:metadata> |
| 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 3479, 15 lines modified | Offset 3479, 15 lines modified | ||
| 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3480 | ············</xccdf-1.2:check> | 3480 | ············</xccdf-1.2:check> |
| 3481 | ··········</xccdf-1.2:Rule> | 3481 | ··········</xccdf-1.2:Rule> |
| 3482 | ········</xccdf-1.2:Group> | 3482 | ········</xccdf-1.2:Group> |
| 3483 | ······</xccdf-1.2:Group> | 3483 | ······</xccdf-1.2:Group> |
| 3484 | ····</xccdf-1.2:Benchmark> | 3484 | ····</xccdf-1.2:Benchmark> |
| 3485 | ··</ds:component> | 3485 | ··</ds:component> |
| 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-0 | 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3488 | ······<oval-def:generator> | 3488 | ······<oval-def:generator> |
| 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 3491 | ········<oval:schema_version>5.11</oval:schema_version> | 3491 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 3493 | ······</oval-def:generator> | 3493 | ······</oval-def:generator> |
| Offset 5189, 504 lines modified | Offset 5189, 489 lines modified | ||
| 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5190 | ············</oval-def:concat> | 5190 | ············</oval-def:concat> |
| 5191 | ··········</oval-def:unique> | 5191 | ··········</oval-def:unique> |
| 5192 | ········</oval-def:local_variable> | 5192 | ········</oval-def:local_variable> |
| 5193 | ······</oval-def:variables> | 5193 | ······</oval-def:variables> |
| 5194 | ····</oval-def:oval_definitions> | 5194 | ····</oval-def:oval_definitions> |
| 5195 | ··</ds:component> | 5195 | ··</ds:component> |
| 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-0 | 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 5197 | ····<ocil:ocil> | 5197 | ····<ocil:ocil> |
| 5198 | ······<ocil:generator> | 5198 | ······<ocil:generator> |
| 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 5203 | ······</ocil:generator> | 5203 | ······</ocil:generator> |
| 5204 | ······<ocil:questionnaires> | 5204 | ······<ocil:questionnaires> |
| 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 5206 | ··········<ocil:title>Disable | 5206 | ··········<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 5207 | ··········<ocil:actions> | 5207 | ··········<ocil:actions> |
| 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 5209 | ··········</ocil:actions> | 5209 | ··········</ocil:actions> |
| 5210 | ········</ocil:questionnaire> | 5210 | ········</ocil:questionnaire> |
| 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 5212 | ··········<ocil:title>Firefox·must· | 5212 | ··········<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 5213 | ··········<ocil:actions> | 5213 | ··········<ocil:actions> |
| 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 5215 | ··········</ocil:actions> | 5215 | ··········</ocil:actions> |
| 5216 | ········</ocil:questionnaire> | 5216 | ········</ocil:questionnaire> |
| 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 5218 | ··········<ocil:title> | 5218 | ··········<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 5219 | ··········<ocil:actions> | 5219 | ··········<ocil:actions> |
| 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 5221 | ··········</ocil:actions> | 5221 | ··········</ocil:actions> |
| 5222 | ········</ocil:questionnaire> | 5222 | ········</ocil:questionnaire> |
| 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> | ||
| 5224 | ········ | 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 5224 | ··········<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> | ||
| 5225 | ··········<ocil:actions> | 5225 | ··········<ocil:actions> |
| 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> | ||
| 5227 | ··········</ocil:actions> | ||
| 5228 | ········</ocil:questionnaire> | ||
| 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 5230 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 5231 | ··········<ocil:actions> | ||
| 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 5227 | ··········</ocil:actions> | 5233 | ··········</ocil:actions> |
| 5228 | ········</ocil:questionnaire> | 5234 | ········</ocil:questionnaire> |
| 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> | 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 5230 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> | 5236 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 5231 | ··········<ocil:actions> | 5237 | ··········<ocil:actions> |
| 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> | 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 5233 | ··········</ocil:actions> | 5239 | ··········</ocil:actions> |
| 5234 | ········</ocil:questionnaire> | 5240 | ········</ocil:questionnaire> |
| 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 5236 | ··········<ocil:title> | 5242 | ··········<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 5237 | ··········<ocil:actions> | 5243 | ··········<ocil:actions> |
| 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 5239 | ··········</ocil:actions> | 5245 | ··········</ocil:actions> |
| 5240 | ········</ocil:questionnaire> | 5246 | ········</ocil:questionnaire> |
| 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 5242 | ··········<ocil:title>Enable· | 5248 | ··········<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 5243 | ··········<ocil:actions> | 5249 | ··········<ocil:actions> |
| 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 5245 | ··········</ocil:actions> | 5251 | ··········</ocil:actions> |
| 5246 | ········</ocil:questionnaire> | 5252 | ········</ocil:questionnaire> |
| 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 5248 | ··········<ocil:title> | 5254 | ··········<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 5249 | ··········<ocil:actions> | 5255 | ··········<ocil:actions> |
| 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 5251 | ··········</ocil:actions> | 5257 | ··········</ocil:actions> |
| 5252 | ········</ocil:questionnaire> | 5258 | ········</ocil:questionnaire> |
| 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 5254 | ··········<ocil:title>Enable | 5260 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 5255 | ··········<ocil:actions> | 5261 | ··········<ocil:actions> |
| 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5262 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 5257 | ··········</ocil:actions> | 5263 | ··········</ocil:actions> |
| 5258 | ········</ocil:questionnaire> | 5264 | ········</ocil:questionnaire> |
| 5259 | ········<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> | 5265 | ········<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 5260 | ··········<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> | 5266 | ··········<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 5261 | ··········<ocil:actions> | 5267 | ··········<ocil:actions> |
| 5262 | ············<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> | 5268 | ············<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 5263 | ··········</ocil:actions> | 5269 | ··········</ocil:actions> |
| 5264 | ········</ocil:questionnaire> | 5270 | ········</ocil:questionnaire> |
| 5265 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5271 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 5266 | ··········<ocil:title>En | 5272 | ··········<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> |
| Max diff block lines reached; 46026/57424 bytes (80.15%) of diff not shown. | |||
| Offset 3, 495 lines modified | Offset 3, 480 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disable | 11 | ······<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Firefox·must· | 17 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 35 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 36 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> | 41 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 36 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 42 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable· | 53 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 48 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 59 | ······<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 54 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Enable | 65 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 60 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> | 70 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> | 71 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 66 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> | 73 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>En | 77 | ······<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> |
| 72 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 83 | ······<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> |
| 78 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable· | 89 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 84 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 95 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 90 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable· | 101 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> |
| 96 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-enhanced_tracking_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 107 | ······<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> |
| 102 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_changes_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 113 | ······<ocil:title>Disable·JavaScript's·Raise·Or·Lower·Windows·Capability</ocil:title> |
| 108 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_changes_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 119 | ······<ocil:title>Disable·Firefox·Pocket</ocil:title> |
| 114 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_pocket_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 125 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 120 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 127 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| Max diff block lines reached; 37631/50022 bytes (75.23%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····2744·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····2744·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··280 | 3 | -rw-r--r--···0········0········0··2805324·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 29696, 126 lines modified | Offset 29696, 126 lines modified | ||
| 00073ff0:·2d74·6172·6765·743d·2223·6964·6d31·3032··-target="#idm102 | 00073ff0:·2d74·6172·6765·743d·2223·6964·6d31·3032··-target="#idm102 | ||
| 00074000:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | 00074000:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | ||
| 00074010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00074010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00074020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00074020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00074030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00074030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00074040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00074040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00074050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00074050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00074060:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 000740 | 00074060:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 00074070:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00074080:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00074090:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000740a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000740b0:·6964·3d22·6964·6d31·3032·3734·223e·3c70··id="idm10274"><p | |||
| 000740c0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 000740d0:·6167·6573·5d5d·0a6e·616d·6520·3d20·226e··ages]].name·=·"n | |||
| 000740e0:·7470·220a·7665·7273·696f·6e20·3d20·222a··tp".version·=·"* | |||
| 000740f0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00074100:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00074110:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00074120:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00074130:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00074140:·6574·3d22·2369·646d·3130·3237·3522·2074··et="#idm10275"·t | |||
| 00074150:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00074160:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00074170:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00074180:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00074190:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 000741a0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 000741b0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 000741c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000741d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000741e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 000741f0:·3d22·6964·6d31·3032·3735·223e·3c74·6162··="idm10275"><tab | |||
| 00074 | 00074200:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 00074210:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00074220:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00074230:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00074240:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00074090:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000740a0:·6522·2069·643d·2269·646d·3130·3237·3422··e"·id="idm10274" | |||
| 000740b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000740c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000740d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000740e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000740f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00074100:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00074110:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00074120:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00074 | 00074250:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00074260:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00074270:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00074280:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00074290:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 000742a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00074 | 000742b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 000742c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 000742d0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 000742e0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 000742f0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 00074300:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 00074310:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 00074320:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 00074330:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 00074340:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 00074350:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 00074360:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 00074370:·4445·4249·414e·5f46·524f·4e54·454e·443d··DEBIAN_FRONTEND= | |||
| 00074380:·6e6f·6e69·6e74·6572·6163·7469·7665·2061··noninteractive·a | |||
| 00074390:·7074·2d67·6574·2069·6e73·7461·6c6c·202d··pt-get·install·- | |||
| 000743a0:·7920·226e·7470·220a·0a65·6c73·650a·2020··y·"ntp"..else.·· | |||
| 000743b0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 00074150:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00074160:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00074170:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00074180:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00074190:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 000741a0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 000741b0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 000741c0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 000741d0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 000741e0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 000741f0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 00074200:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 00074210:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 00074220:·6865·6e0a·0a44·4542·4941·4e5f·4652·4f4e··hen..DEBIAN_FRON | |||
| 00074230:·5445·4e44·3d6e·6f6e·696e·7465·7261·6374··TEND=noninteract | |||
| 00074240:·6976·6520·6170·742d·6765·7420·696e·7374··ive·apt-get·inst | |||
| 00074250:·616c·6c20·2d79·2022·6e74·7022·0a0a·656c··all·-y·"ntp"..el | |||
| 00074260:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 00074270:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 00074280:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 00074290:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 000742a0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 000742b0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000742c0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000742d0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 000742e0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 000742f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00074300:·646d·3130·3237·3522·2074·6162·696e·6465··dm10275"·tabinde | |||
| 00074310:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00074320:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00074330:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00074340:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00074350:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00074360 | 000743c0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 000743d0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 000743e0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 000743f0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 00074370:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00074380:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| Max diff block lines reached; 414/17580 bytes (2.35%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3756, 14 lines modified | Offset 3756, 19 lines modified | ||
| 3756 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3756 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3757 | References:················4.4.2.4 | 3757 | References:················4.4.2.4 |
| 3758 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3758 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3759 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3759 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3760 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3760 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3761 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3761 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3762 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3762 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3763 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3764 | [[packages]] | ||
| 3765 | name·=·"ntp" | ||
| 3766 | version·=·"*" | ||
| 3763 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3767 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3764 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3768 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3765 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3769 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3766 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3770 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3767 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3771 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3768 | #·Remediation·is·applicable·only·in·certain·platforms | 3772 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3769 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3773 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3789, 19 lines modified | Offset 3794, 14 lines modified | ||
| 3789 | ··-·PCI-DSS-Req-10.4 | 3794 | ··-·PCI-DSS-Req-10.4 |
| 3790 | ··-·enable_strategy | 3795 | ··-·enable_strategy |
| 3791 | ··-·high_severity | 3796 | ··-·high_severity |
| 3792 | ··-·low_complexity | 3797 | ··-·low_complexity |
| 3793 | ··-·low_disruption | 3798 | ··-·low_disruption |
| 3794 | ··-·no_reboot_needed | 3799 | ··-·no_reboot_needed |
| 3795 | ··-·package_ntp_installed | 3800 | ··-·package_ntp_installed |
| 3796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3797 | [[packages]] | ||
| 3798 | name·=·"ntp" | ||
| 3799 | version·=·"*" | ||
| 3800 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3801 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3802 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3802 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3803 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3803 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3804 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3804 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3805 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3805 | include·install_ntp | 3806 | include·install_ntp |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16797, 106 lines modified | Offset 16797, 106 lines modified | ||
| 000419c0:·2d74·6172·6765·743d·2223·6964·6d33·3835··-target="#idm385 | 000419c0:·2d74·6172·6765·743d·2223·6964·6d33·3835··-target="#idm385 | ||
| 000419d0:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | 000419d0:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | ||
| 000419e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 000419e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000419f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000419f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00041a00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00041a00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00041a10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00041a10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00041a20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00041a20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00041a30:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00041a40:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00041a50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00041a60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00041a70:·2220·6964·3d22·6964·6d33·3835·3422·3e3c··"·id="idm3854">< | |||
| 00041a80:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 00041a90:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 00041aa0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 00041ab0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 00041ac0:·6966·2064·706b·672d·7175·6572·7920·2d2d··if·dpkg-query·-- | |||
| 00041ad0:·7368·6f77·202d·2d73·686f·7766·6f72·6d61··show·--showforma | |||
| 00041ae0:·743d·2724·7b64·623a·5374·6174·7573·2d53··t='${db:Status-S | |||
| 00041af0:·7461·7475·737d·5c6e·2720·2767·7275·6232··tatus}\n'·'grub2 | |||
| 00041b00:·2d63·6f6d·6d6f·6e27·2032·2667·743b·2f64··-common'·2>/d | |||
| 00041b10:·6576·2f6e·756c·6c20·7c20·6772·6570·202d··ev/null·|·grep·- | |||
| 00041b20:·7120·696e·7374·616c·6c65·6420·2661·6d70··q·installed·& | |||
| 00041b30:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | |||
| 00041b40:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 00041b50:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 00041b60:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 00041b70:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a23··nv·];·};·then..# | |||
| 00041b80:·2043·6f72·7265·6374·2074·6865·2066·6f72···Correct·the·for | |||
| 00041b90:·6d20·6f66·2064·6566·6175·6c74·206b·6572··m·of·default·ker | |||
| 00041ba0:·6e65·6c20·636f·6d6d·616e·6420·6c69·6e65··nel·command·line | |||
| 00041bb0:·2069·6e20·4752·5542·0a69·6620·6772·6570···in·GRUB.if·grep | |||
| 00041bc0:·202d·7120·275e·5c73·2a47·5255·425f·434d···-q·'^\s*GRUB_CM | |||
| 00041bd0:·444c·494e·455f·4c49·4e55·583d·2e2a·696f··DLINE_LINUX=.*io | |||
| 00041 | 00041a30:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 00041a40:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00041a50:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00041a60:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00041a70:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00041a80:·643d·2269·646d·3338·3534·223e·3c70·7265··d="idm3854"><pre | |||
| 00041a90:·3e3c·636f·6465·3e5b·6375·7374·6f6d·697a··><code>[customiz | |||
| 00041aa0:·6174·696f·6e73·2e6b·6572·6e65·6c5d·0a61··ations.kernel].a | |||
| 00041ab0:·7070·656e·6420·3d20·2269·6f6d·6d75·3d66··ppend·=·"iommu=f | |||
| 00041ac0:·6f72·6365·220a·3c2f·636f·6465·3e3c·2f70··orce".</code></p | |||
| 00041ad0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00041ae0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00041af0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00041b00:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00041b10:·7461·7267·6574·3d22·2369·646d·3338·3535··target="#idm3855 | |||
| 00041b20:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00041b30:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00041b40:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00041b50:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00041b60:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00041b70:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00041b80:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 00041b90:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00041ba0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00041bb0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00041bc0:·2069·643d·2269·646d·3338·3535·223e·3c70···id="idm3855"><p | |||
| 00041bd0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 00041be0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 00041bf0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 00041c00:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 00041c10:·6620·6470·6b67·2d71·7565·7279·202d·2d73··f·dpkg-query·--s | |||
| 00041c20:·686f·7720·2d2d·7368·6f77·666f·726d·6174··how·--showformat | |||
| 00041c30:·3d27·247b·6462·3a53·7461·7475·732d·5374··='${db:Status-St | |||
| 00041c40:·6174·7573·7d5c·6e27·2027·6772·7562·322d··atus}\n'·'grub2- | |||
| 00041c50:·636f·6d6d·6f6e·2720·3226·6774·3b2f·6465··common'·2>/de | |||
| 00041c60:·762f·6e75·6c6c·207c·2067·7265·7020·2d71··v/null·|·grep·-q | |||
| 00041c70:·2069·6e73·7461·6c6c·6564·2026·616d·703b···installed·& | |||
| 00041c80:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | |||
| 00041c90:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 00041ca0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 00041cb0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 00041cc0:·7620·5d3b·207d·3b20·7468·656e·0a0a·2320··v·];·};·then..#· | |||
| 00041cd0:·436f·7272·6563·7420·7468·6520·666f·726d··Correct·the·form | |||
| 00041ce0:·206f·6620·6465·6661·756c·7420·6b65·726e···of·default·kern | |||
| 00041cf0:·656c·2063·6f6d·6d61·6e64·206c·696e·6520··el·command·line· | |||
| 00041d00:·696e·2047·5255·420a·6966·2067·7265·7020··in·GRUB.if·grep· | |||
| 00041d10:·2d71·2027·5e5c·732a·4752·5542·5f43·4d44··-q·'^\s*GRUB_CMD | |||
| 00041d20:·4c49·4e45·5f4c·494e·5558·3d2e·2a69·6f6d··LINE_LINUX=.*iom | |||
| 00041d30:·6d75·3d2e·2a22·2720·2027·2f65·7463·2f64··mu=.*"'··'/etc/d | |||
| 00041d40:·6566·6175·6c74·2f67·7275·6227·203b·2074··efault/grub'·;·t | |||
| 00041d50:·6865·6e0a·2020·2020·2020·2023·206d·6f64··hen.·······#·mod | |||
| 00041d60:·6966·7920·7468·6520·4752·5542·2063·6f6d··ify·the·GRUB·com | |||
| 00041d70:·6d61·6e64·2d6c·696e·6520·6966·2061·6e20··mand-line·if·an· | |||
| 00041d80:·696f·6d6d·753d·2061·7267·2061·6c72·6561··iommu=·arg·alrea | |||
| 00041d90:·6479·2065·7869·7374·730a·2020·2020·2020··dy·exists.······ | |||
| 00041da0:·2073·6564·202d·6920·2273·2f5c·285e·5c73···sed·-i·"s/\(^\s | |||
| 00041db0:·2a47·5255·425f·434d·444c·494e·455f·4c49··*GRUB_CMDLINE_LI | |||
| 00041dc0:·4e55·583d·5c22·2e2a·5c29·696f·6d6d·753d··NUX=\".*\)iommu= | |||
| 00041dd0:·5b5e·5b3a·7370·6163·653a·5d5d·5c2b·5c28··[^[:space:]]\+\( | |||
| 00041de0:·2e2a·5c22·5c29·2f5c·3169·6f6d·6d75·3d66··.*\"\)/\1iommu=f | |||
| 00041df0:·6f72·6365·5c32·2f22·2020·272f·6574·632f··orce\2/"··'/etc/ | |||
| 00041 | 00041e00:·6465·6661·756c·742f·6772·7562·270a·2320··default/grub'.#· | ||
| 00041e10:·4164·6420·746f·2061·6c72·6561·6479·2065··Add·to·already·e | |||
| 00041e20:·7869·7374·696e·6720·4752·5542·5f43·4d44··xisting·GRUB_CMD | |||
| 00041e30:·4c49·4e45·5f4c·494e·5558·2070·6172·616d··LINE_LINUX·param | |||
| 00041e40:·6574·6572·730a·656c·6966·2067·7265·7020··eters.elif·grep· | |||
| 00041e50:·2d71·2027·5e5c·732a·4752·5542·5f43·4d44··-q·'^\s*GRUB_CMD | |||
| 00041e60:·4c49·4e45·5f4c·494e·5558·3d27·2020·272f··LINE_LINUX='··'/ | |||
| 00041e70:·6574·632f·6465·6661·756c·742f·6772·7562··etc/default/grub | |||
| 00041c00:·7468·656e·0a20·2020·2020·2020·2320·6d6f··then.·······#·mo | |||
| 00041c10:·6469·6679·2074·6865·2047·5255·4220·636f··dify·the·GRUB·co | |||
| 00041c20:·6d6d·616e·642d·6c69·6e65·2069·6620·616e··mmand-line·if·an | |||
| 00041c30:·2069·6f6d·6d75·3d20·6172·6720·616c·7265···iommu=·arg·alre | |||
| 00041c40:·6164·7920·6578·6973·7473·0a20·2020·2020··ady·exists.····· | |||
| 00041c50:·2020·7365·6420·2d69·2022·732f·5c28·5e5c····sed·-i·"s/\(^\ | |||
| 00041c60:·732a·4752·5542·5f43·4d44·4c49·4e45·5f4c··s*GRUB_CMDLINE_L | |||
| 00041c70:·494e·5558·3d5c·222e·2a5c·2969·6f6d·6d75··INUX=\".*\)iommu | |||
| Max diff block lines reached; 130026/144432 bytes (90.03%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 406, 14 lines modified | Offset 406, 17 lines modified | ||
| 406 | enabling·IOMMU·can·cause·hardware·instabilities.·Proper·function·and·stability | 406 | enabling·IOMMU·can·cause·hardware·instabilities.·Proper·function·and·stability |
| 407 | should·be·assessed·before·applying·remediation·to·production·systems. | 407 | should·be·assessed·before·applying·remediation·to·production·systems. |
| 408 | Rationale:··On·x86·architectures,·activating·the·I/OMMU·prevents·the·system | 408 | Rationale:··On·x86·architectures,·activating·the·I/OMMU·prevents·the·system |
| 409 | ············from·arbitrary·accesses·potentially·made·by·hardware·devices. | 409 | ············from·arbitrary·accesses·potentially·made·by·hardware·devices. |
| 410 | Severity: ··unknown | 410 | Severity: ··unknown |
| 411 | Rule·ID:····xccdf_org.ssgproject.content_rule_grub2_enable_iommu_force | 411 | Rule·ID:····xccdf_org.ssgproject.content_rule_grub2_enable_iommu_force |
| 412 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R7 | 412 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R7 |
| 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 414 | [customizations.kernel] | ||
| 415 | append·=·"iommu=force" | ||
| 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 414 | #·Remediation·is·applicable·only·in·certain·platforms | 417 | #·Remediation·is·applicable·only·in·certain·platforms |
| 415 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ | 418 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ |
| 416 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ | 419 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ |
| 417 | run/.containerenv·];·};·then | 420 | run/.containerenv·];·};·then |
| 418 | #·Correct·the·form·of·default·kernel·command·line·in·GRUB | 421 | #·Correct·the·form·of·default·kernel·command·line·in·GRUB |
| Offset 431, 17 lines modified | Offset 434, 14 lines modified | ||
| 431 | ·······echo·"GRUB_CMDLINE_LINUX=\"iommu=force\""·>>·'/etc/default/grub' | 434 | ·······echo·"GRUB_CMDLINE_LINUX=\"iommu=force\""·>>·'/etc/default/grub' |
| 432 | fi | 435 | fi |
| 433 | update-grub | 436 | update-grub |
| 434 | else | 437 | else |
| 435 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 438 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 436 | fi | 439 | fi |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | [customizations.kernel] | ||
| 439 | append·=·"iommu=force" | ||
| 440 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules | 440 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules |
| 441 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·syslog·service·has·been·the·default·Unix·logging·mechanism·for·many | 441 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·syslog·service·has·been·the·default·Unix·logging·mechanism·for·many |
| 442 | years.·It·has·a·number·of·downsides,·including·inconsistent·log·format,·lack·of | 442 | years.·It·has·a·number·of·downsides,·including·inconsistent·log·format,·lack·of |
| 443 | authentication·for·received·messages,·and·lack·of·authentication,·encryption, | 443 | authentication·for·received·messages,·and·lack·of·authentication,·encryption, |
| 444 | or·reliable·transport·for·messages·sent·over·a·network.·However,·due·to·its | 444 | or·reliable·transport·for·messages·sent·over·a·network.·However,·due·to·its |
| 445 | long·history,·syslog·is·a·de·facto·standard·which·is·supported·by·almost·all | 445 | long·history,·syslog·is·a·de·facto·standard·which·is·supported·by·almost·all |
| 446 | Unix·applications. | 446 | Unix·applications. |
| Offset 3469, 14 lines modified | Offset 3469, 19 lines modified | ||
| 3469 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3469 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3470 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3470 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3471 | ···························SR·2.7,·SR·7.6 | 3471 | ···························SR·2.7,·SR·7.6 |
| 3472 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3472 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3473 | ···························A.14.2.4,·A.9.1.2 | 3473 | ···························A.14.2.4,·A.9.1.2 |
| 3474 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3474 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3475 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3475 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3477 | [[packages]] | ||
| 3478 | name·=·"cron" | ||
| 3479 | version·=·"*" | ||
| 3476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3481 | #·Remediation·is·applicable·only·in·certain·platforms | 3485 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3482 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3501, 19 lines modified | Offset 3506, 14 lines modified | ||
| 3501 | ··-·NIST-800-53-CM-6(a) | 3506 | ··-·NIST-800-53-CM-6(a) |
| 3502 | ··-·enable_strategy | 3507 | ··-·enable_strategy |
| 3503 | ··-·low_complexity | 3508 | ··-·low_complexity |
| 3504 | ··-·low_disruption | 3509 | ··-·low_disruption |
| 3505 | ··-·medium_severity | 3510 | ··-·medium_severity |
| 3506 | ··-·no_reboot_needed | 3511 | ··-·no_reboot_needed |
| 3507 | ··-·package_cron_installed | 3512 | ··-·package_cron_installed |
| 3508 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3509 | [[packages]] | ||
| 3510 | name·=·"cron" | ||
| 3511 | version·=·"*" | ||
| 3512 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3513 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3514 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3514 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3515 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3515 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3516 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3516 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3517 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3517 | include·install_cron | 3518 | include·install_cron |
| Offset 3898, 14 lines modified | Offset 3898, 19 lines modified | ||
| 3898 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3898 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3899 | References:················4.4.2.4 | 3899 | References:················4.4.2.4 |
| 3900 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3900 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3901 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3901 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3902 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3902 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3903 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3903 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3904 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3904 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3906 | [[packages]] | ||
| 3907 | name·=·"ntp" | ||
| 3908 | version·=·"*" | ||
| 3905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3909 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3910 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3911 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3912 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3913 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3910 | #·Remediation·is·applicable·only·in·certain·platforms | 3914 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3911 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3915 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3931, 19 lines modified | Offset 3936, 14 lines modified | ||
| 3931 | ··-·PCI-DSS-Req-10.4 | 3936 | ··-·PCI-DSS-Req-10.4 |
| 3932 | ··-·enable_strategy | 3937 | ··-·enable_strategy |
| 3933 | ··-·high_severity | 3938 | ··-·high_severity |
| 3934 | ··-·low_complexity | 3939 | ··-·low_complexity |
| 3935 | ··-·low_disruption | 3940 | ··-·low_disruption |
| 3936 | ··-·no_reboot_needed | 3941 | ··-·no_reboot_needed |
| 3937 | ··-·package_ntp_installed | 3942 | ··-·package_ntp_installed |
| 3938 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3939 | [[packages]] | ||
| 3940 | name·=·"ntp" | ||
| 3941 | version·=·"*" | ||
| 3942 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3943 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3943 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3944 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3944 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3945 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 6532/12695 bytes (51.45%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 27977, 125 lines modified | Offset 27977, 125 lines modified | ||
| 0006d480:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | 0006d480:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | ||
| 0006d490:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | 0006d490:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | ||
| 0006d4a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0006d4a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0006d4b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0006d4b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0006d4c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0006d4c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0006d4d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0006d4d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0006d4e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0006d4e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0006d4f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0006d500:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0006d510:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0006d520:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0006d530:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0006d540:·6964·3d22·6964·6d39·3337·3922·3e3c·7072··id="idm9379"><pr | |||
| 0006d550:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0006d560:·6765·735d·5d0a·6e61·6d65·203d·2022·6372··ges]].name·=·"cr | |||
| 0006d570:·6f6e·220a·7665·7273·696f·6e20·3d20·222a··on".version·=·"* | |||
| 0006d580:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0006d590:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0006d5a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0006d5b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0006d5c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0006d5d0:·6574·3d22·2369·646d·3933·3830·2220·7461··et="#idm9380"·ta | |||
| 0006d5e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0006d5f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0006d600:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0006d610:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0006d620:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0006d630:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0006d640:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0006d650:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006d660:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006d670:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006d680:·2269·646d·3933·3830·223e·3c74·6162·6c65··"idm9380"><table | |||
| 0006d690:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006d6a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006d6b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006d6c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006d6d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006d6e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0006d6f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006d700:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006d4f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0006d500:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0006d510:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0006d520:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0006d530:·6522·2069·643d·2269·646d·3933·3739·223e··e"·id="idm9379"> | |||
| 0006d540:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0006d550:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0006d560:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0006d570:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0006d580:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0006d590:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0006d5a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0006d5b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0006d5c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0006d5d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0006d5e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0006d5f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0006d600:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0006d610:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0006d620:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0006d630:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0006d640:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0006d650:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0006d660:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0006d670:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0006d680:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0006d690:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0006d6a0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0006d6b0:·656e·0a0a·4445·4249·414e·5f46·524f·4e54··en..DEBIAN_FRONT | |||
| 0006d6c0:·454e·443d·6e6f·6e69·6e74·6572·6163·7469··END=noninteracti | |||
| 0006d6d0:·7665·2061·7074·2d67·6574·2069·6e73·7461··ve·apt-get·insta | |||
| 0006d6e0:·6c6c·202d·7920·2263·726f·6e22·0a0a·656c··ll·-y·"cron"..el | |||
| 0006d6f0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0006d700:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0006d710:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0006d720:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0006d730:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0006d740:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0006d750:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0006d760:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0006d770:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0006d780:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0006d790:·646d·3933·3830·2220·7461·6269·6e64·6578··dm9380"·tabindex | |||
| 0006d7a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0006d7b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0006d7c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0006d7d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0006d7e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0006d7f0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0006d800:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0006d810:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0006d820:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0006d830:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0006d840:·6d39·3338·3022·3e3c·7461·626c·6520·636c··m9380"><table·cl | |||
| 0006d850:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0006d860:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0006d870:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0006d880:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0006d890:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0006d8a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0006d8b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0006d8c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0006d8d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0006d8e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0006d8f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0006d900:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0006d910:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0006d | 0006d710:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0006d930:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0006d940:·206e·616d·653a·2045·6e73·7572·6520·6372···name:·Ensure·cr | |||
| Max diff block lines reached; 113990/131018 bytes (87.00%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3410, 14 lines modified | Offset 3410, 19 lines modified | ||
| 3410 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3410 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3411 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3411 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3412 | ···························SR·2.7,·SR·7.6 | 3412 | ···························SR·2.7,·SR·7.6 |
| 3413 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3413 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3414 | ···························A.14.2.4,·A.9.1.2 | 3414 | ···························A.14.2.4,·A.9.1.2 |
| 3415 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3415 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3416 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3416 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3418 | [[packages]] | ||
| 3419 | name·=·"cron" | ||
| 3420 | version·=·"*" | ||
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3422 | #·Remediation·is·applicable·only·in·certain·platforms | 3426 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3423 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3427 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3442, 19 lines modified | Offset 3447, 14 lines modified | ||
| 3442 | ··-·NIST-800-53-CM-6(a) | 3447 | ··-·NIST-800-53-CM-6(a) |
| 3443 | ··-·enable_strategy | 3448 | ··-·enable_strategy |
| 3444 | ··-·low_complexity | 3449 | ··-·low_complexity |
| 3445 | ··-·low_disruption | 3450 | ··-·low_disruption |
| 3446 | ··-·medium_severity | 3451 | ··-·medium_severity |
| 3447 | ··-·no_reboot_needed | 3452 | ··-·no_reboot_needed |
| 3448 | ··-·package_cron_installed | 3453 | ··-·package_cron_installed |
| 3449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3450 | [[packages]] | ||
| 3451 | name·=·"cron" | ||
| 3452 | version·=·"*" | ||
| 3453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3458 | include·install_cron | 3459 | include·install_cron |
| Offset 3839, 14 lines modified | Offset 3839, 19 lines modified | ||
| 3839 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3839 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3840 | References:················4.4.2.4 | 3840 | References:················4.4.2.4 |
| 3841 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3841 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3842 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3842 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3843 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3843 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3844 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3844 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3845 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3845 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3847 | [[packages]] | ||
| 3848 | name·=·"ntp" | ||
| 3849 | version·=·"*" | ||
| 3846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3847 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3851 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3848 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3852 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3849 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3853 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3850 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3854 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3851 | #·Remediation·is·applicable·only·in·certain·platforms | 3855 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3852 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3856 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3872, 19 lines modified | Offset 3877, 14 lines modified | ||
| 3872 | ··-·PCI-DSS-Req-10.4 | 3877 | ··-·PCI-DSS-Req-10.4 |
| 3873 | ··-·enable_strategy | 3878 | ··-·enable_strategy |
| 3874 | ··-·high_severity | 3879 | ··-·high_severity |
| 3875 | ··-·low_complexity | 3880 | ··-·low_complexity |
| 3876 | ··-·low_disruption | 3881 | ··-·low_disruption |
| 3877 | ··-·no_reboot_needed | 3882 | ··-·no_reboot_needed |
| 3878 | ··-·package_ntp_installed | 3883 | ··-·package_ntp_installed |
| 3879 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3880 | [[packages]] | ||
| 3881 | name·=·"ntp" | ||
| 3882 | version·=·"*" | ||
| 3883 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3884 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3884 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3885 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3885 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3886 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3886 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3887 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3887 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3888 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3888 | include·install_ntp | 3889 | include·install_ntp |
| Offset 3916, 14 lines modified | Offset 3916, 18 lines modified | ||
| 3916 | ···························4.4.2.4 | 3916 | ···························4.4.2.4 |
| 3917 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3917 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3918 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3918 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3919 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) | 3919 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) |
| 3920 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3920 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3921 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3921 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3922 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 | 3922 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 |
| 3923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3924 | [customizations.services] | ||
| 3925 | enabled·=·["ntp"] | ||
| 3923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3926 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3924 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3927 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3925 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3928 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3926 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3929 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3927 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3930 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3928 | #·Remediation·is·applicable·only·in·certain·platforms | 3931 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3929 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·- | 3932 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·- |
| Offset 3984, 18 lines modified | Offset 3988, 14 lines modified | ||
| 3984 | ··-·PCI-DSSv4-10.6.1 | 3988 | ··-·PCI-DSSv4-10.6.1 |
| 3985 | ··-·enable_strategy | 3989 | ··-·enable_strategy |
| 3986 | ··-·high_severity | 3990 | ··-·high_severity |
| 3987 | ··-·low_complexity | 3991 | ··-·low_complexity |
| 3988 | ··-·low_disruption | 3992 | ··-·low_disruption |
| 3989 | ··-·no_reboot_needed | 3993 | ··-·no_reboot_needed |
| 3990 | ··-·service_ntp_enabled | 3994 | ··-·service_ntp_enabled |
| 3991 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3992 | [customizations.services] | ||
| 3993 | enabled·=·["ntp"] | ||
| 3994 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3995 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 5007/10847 bytes (46.16%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19700, 126 lines modified | Offset 19700, 126 lines modified | ||
| 0004cf30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004cf30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004cf40:·2369·646d·3437·3133·2220·7461·6269·6e64··#idm4713"·tabind | 0004cf40:·2369·646d·3437·3133·2220·7461·6269·6e64··#idm4713"·tabind | ||
| 0004cf50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0004cf50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0004cf60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0004cf60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0004cf70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0004cf70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0004cf80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0004cf80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0004cf90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0004cf90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0004cfa0:·5265·6d65·6469·6174·696f·6e20· | 0004cfa0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0004cfb0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0004cfc0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004cfd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004cfe0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004cff0:·6170·7365·2220·6964·3d22·6964·6d34·3731··apse"·id="idm471 | |||
| 0004cfb0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0004cfc0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004cfd0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004cfe0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004cff0:·3437·3133·223e·3c74·6162·6c65·2063·6c61··4713"><table·cla | |||
| 0004d000:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0004d010:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0004d020:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0004d030:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0004d040:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0004d050:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004d060:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004d070:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0004d080:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004d090:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0004d0a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0004d0b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0004d0c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0004d0d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0004d0 | 0004d000:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | ||
| 0004d010:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0004d020:·203d·2022·7273·7973·6c6f·6722·0a76·6572···=·"rsyslog".ver | |||
| 0004d030:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0004d0f0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0004d100:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0004d110:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0004d120:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0004d130:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0004d140:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0004d150:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0004d160:·205d·3b20·7468·656e·0a0a·4445·4249·414e···];·then..DEBIAN | |||
| 0004d170:·5f46·524f·4e54·454e·443d·6e6f·6e69·6e74··_FRONTEND=nonint | |||
| 0004d180:·6572·6163·7469·7665·2061·7074·2d67·6574··eractive·apt-get | |||
| 0004d190:·2069·6e73·7461·6c6c·202d·7920·2272·7379···install·-y·"rsy | |||
| 0004d1a0:·736c·6f67·220a·0a65·6c73·650a·2020·2020··slog"..else.···· | |||
| 0004d1b0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0004d1c0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0004d1d0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0004d1e0:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0004d1f0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0004d200:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0004d210:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0004d220:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0004d230:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0004d240:·6172·6765·743d·2223·6964·6d34·3731·3422··arget="#idm4714" | |||
| 0004d250:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0004d260:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0004d270:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0004d280:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0004d290:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0004d2a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0004d2b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0004d2c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004d2d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0004d2e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0004d2f0:·6522·2069·643d·2269·646d·3437·3134·223e··e"·id="idm4714"> | |||
| 0004d300:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0004d310:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0004d320:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0004d330:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0004d340:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0004d350:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0004d360:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004d370:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004d380:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004d390:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0004d3a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0004d3b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004d3c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0004d3d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0004d3e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004d3f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0004d400:·456e·7375·7265·2072·7379·736c·6f67·2069··Ensure·rsyslog·i | |||
| 0004d410:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0004d420:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0004d430:·2072·7379·736c·6f67·0a20·2020·2073·7461···rsyslog.····sta | |||
| 0004d440:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0004d450:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0004d460:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0004d470:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0004d480:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0004d490:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0004d4a0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0004d4b0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0004d4c0:·332d·434d·2d36·2861·290a·2020·2d20·656e··3-CM-6(a).··-·en | |||
| 0004d4d0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0004d4e0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0004d4f0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0004d500:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0004d510:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0004d520:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0004d530:·2070·6163·6b61·6765·5f72·7379·736c·6f67···package_rsyslog | |||
| 0004d540:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0004d | 0004d040:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0004d | 0004d050:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0004d | 0004d060:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0004d | 0004d070:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0004d | 0004d080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| Max diff block lines reached; 169412/186578 bytes (90.80%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1544, 14 lines modified | Offset 1544, 19 lines modified | ||
| 1544 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1544 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1545 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1545 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1546 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1546 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1547 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1547 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1548 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1548 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1549 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1549 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1550 | ···························SRG-OS-000480-GPOS-00227 | 1550 | ···························SRG-OS-000480-GPOS-00227 |
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1552 | [[packages]] | ||
| 1553 | name·=·"rsyslog" | ||
| 1554 | version·=·"*" | ||
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1552 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1556 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1553 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1557 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1554 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1558 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1555 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1559 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1556 | #·Remediation·is·applicable·only·in·certain·platforms | 1560 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1557 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1561 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1576, 19 lines modified | Offset 1581, 14 lines modified | ||
| 1576 | ··-·NIST-800-53-CM-6(a) | 1581 | ··-·NIST-800-53-CM-6(a) |
| 1577 | ··-·enable_strategy | 1582 | ··-·enable_strategy |
| 1578 | ··-·low_complexity | 1583 | ··-·low_complexity |
| 1579 | ··-·low_disruption | 1584 | ··-·low_disruption |
| 1580 | ··-·medium_severity | 1585 | ··-·medium_severity |
| 1581 | ··-·no_reboot_needed | 1586 | ··-·no_reboot_needed |
| 1582 | ··-·package_rsyslog_installed | 1587 | ··-·package_rsyslog_installed |
| 1583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1584 | [[packages]] | ||
| 1585 | name·=·"rsyslog" | ||
| 1586 | version·=·"*" | ||
| 1587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1588 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1589 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1590 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1591 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1592 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1592 | include·install_rsyslog | 1593 | include·install_rsyslog |
| Offset 1618, 14 lines modified | Offset 1618, 18 lines modified | ||
| 1618 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1618 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1619 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1619 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1620 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1620 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1621 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1621 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1622 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1622 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1623 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1623 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1624 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1624 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1626 | [customizations.services] | ||
| 1627 | enabled·=·["rsyslog"] | ||
| 1625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1630 | #·Remediation·is·applicable·only·in·certain·platforms | 1633 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1631 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1634 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1665, 18 lines modified | Offset 1669, 14 lines modified | ||
| 1665 | ··-·NIST-800-53-CM-6(a) | 1669 | ··-·NIST-800-53-CM-6(a) |
| 1666 | ··-·enable_strategy | 1670 | ··-·enable_strategy |
| 1667 | ··-·low_complexity | 1671 | ··-·low_complexity |
| 1668 | ··-·low_disruption | 1672 | ··-·low_disruption |
| 1669 | ··-·medium_severity | 1673 | ··-·medium_severity |
| 1670 | ··-·no_reboot_needed | 1674 | ··-·no_reboot_needed |
| 1671 | ··-·service_rsyslog_enabled | 1675 | ··-·service_rsyslog_enabled |
| 1672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1673 | [customizations.services] | ||
| 1674 | enabled·=·["rsyslog"] | ||
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1676 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1677 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1678 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1679 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1680 | include·enable_rsyslog | 1681 | include·enable_rsyslog |
| Offset 3374, 14 lines modified | Offset 3374, 19 lines modified | ||
| 3374 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3374 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3375 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3375 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3376 | ···························SR·2.7,·SR·7.6 | 3376 | ···························SR·2.7,·SR·7.6 |
| 3377 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3377 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3378 | ···························A.14.2.4,·A.9.1.2 | 3378 | ···························A.14.2.4,·A.9.1.2 |
| 3379 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3379 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3380 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3380 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3382 | [[packages]] | ||
| 3383 | name·=·"cron" | ||
| 3384 | version·=·"*" | ||
| 3381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3386 | #·Remediation·is·applicable·only·in·certain·platforms | 3390 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3387 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3391 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3406, 19 lines modified | Offset 3411, 14 lines modified | ||
| 3406 | ··-·NIST-800-53-CM-6(a) | 3411 | ··-·NIST-800-53-CM-6(a) |
| 3407 | ··-·enable_strategy | 3412 | ··-·enable_strategy |
| 3408 | ··-·low_complexity | 3413 | ··-·low_complexity |
| 3409 | ··-·low_disruption | 3414 | ··-·low_disruption |
| 3410 | ··-·medium_severity | 3415 | ··-·medium_severity |
| 3411 | ··-·no_reboot_needed | 3416 | ··-·no_reboot_needed |
| 3412 | ··-·package_cron_installed | 3417 | ··-·package_cron_installed |
| 3413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3414 | [[packages]] | ||
| 3415 | name·=·"cron" | ||
| 3416 | version·=·"*" | ||
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9854/15801 bytes (62.36%) of diff not shown. | |||
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 29730, 126 lines modified | Offset 29730, 126 lines modified | ||
| 00074210:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00074210:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00074220:·6d31·3139·3237·2220·7461·6269·6e64·6578··m11927"·tabindex | 00074220:·6d31·3139·3237·2220·7461·6269·6e64·6578··m11927"·tabindex | ||
| 00074230:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00074230:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00074240:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00074240:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00074250:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00074250:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00074260:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00074260:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00074270:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00074270:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00074280:·6d65·6469·6174·696f·6e20· | 00074280:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00074290:· | 00074290:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 000742a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000742b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000742c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000742d0:·7365·2220·6964·3d22·6964·6d31·3139·3237··se"·id="idm11927 | |||
| 000742e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 000742f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00074300:·3d20·226e·7470·220a·7665·7273·696f·6e20··=·"ntp".version· | |||
| 00074310:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 00074320:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00074330:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00074340:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00074350:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00074360:·7461·7267·6574·3d22·2369·646d·3131·3932··target="#idm1192 | |||
| 00074370:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 00074380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00074390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 000743a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 000743b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 000743c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 000743d0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 000743e0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 000743f0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00074400:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00074410:·2220·6964·3d22·6964·6d31·3139·3238·223e··"·id="idm11928"> | |||
| 00074 | 00074420:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 00074430:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00074440:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00074450:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00074460:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000742b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000742c0:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 000742d0:·3932·3722·3e3c·7461·626c·6520·636c·6173··927"><table·clas | |||
| 000742e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000742f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00074300:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00074310:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00074320:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00074330:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00074340:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00074 | 00074470:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00074 | 00074480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00074370:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00074380:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00074 | 00074490:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 000744a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000744b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00074 | 000744c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 000744d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 000744e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 000744f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00074500:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00074510:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 00074520:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 00074530:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00074540:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00074550:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 00074560:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 00074570:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 00074580:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 00074590:·656e·0a0a·4445·4249·414e·5f46·524f·4e54··en..DEBIAN_FRONT | |||
| 000745a0:·454e·443d·6e6f·6e69·6e74·6572·6163·7469··END=noninteracti | |||
| 000745b0:·7665·2061·7074·2d67·6574·2069·6e73·7461··ve·apt-get·insta | |||
| 000745c0:·6c6c·202d·7920·226e·7470·220a·0a65·6c73··ll·-y·"ntp"..els | |||
| 000745d0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 000745e0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 000745f0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 00074600:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 00074610:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 000743b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 000743c0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 000743d0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 000743e0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 000743f0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 00074400:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 00074410:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 00074420:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 00074430:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 00074440:·5d3b·2074·6865·6e0a·0a44·4542·4941·4e5f··];·then..DEBIAN_ | |||
| 00074450:·4652·4f4e·5445·4e44·3d6e·6f6e·696e·7465··FRONTEND=noninte | |||
| 00074460:·7261·6374·6976·6520·6170·742d·6765·7420··ractive·apt-get· | |||
| 00074470:·696e·7374·616c·6c20·2d79·2022·6e74·7022··install·-y·"ntp" | |||
| 00074480:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 00074490:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 000744a0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 000744b0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 000744c0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 000744d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 000744e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 000744f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00074500:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00074510:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00074520:·3d22·2369·646d·3131·3932·3822·2074·6162··="#idm11928"·tab | |||
| 00074530:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00074540:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00074550:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00074560:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00074570:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00074580:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 00074590:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 000745a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 000745b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 000745c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| Max diff block lines reached; 414/17580 bytes (2.35%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3761, 14 lines modified | Offset 3761, 19 lines modified | ||
| 3761 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3761 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3762 | References:················4.4.2.4 | 3762 | References:················4.4.2.4 |
| 3763 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3763 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3764 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3764 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3765 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3765 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3766 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3766 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3769 | [[packages]] | ||
| 3770 | name·=·"ntp" | ||
| 3771 | version·=·"*" | ||
| 3768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3772 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3769 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3773 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3770 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3774 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3771 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3775 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3772 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3776 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3773 | #·Remediation·is·applicable·only·in·certain·platforms | 3777 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3774 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3778 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3794, 19 lines modified | Offset 3799, 14 lines modified | ||
| 3794 | ··-·PCI-DSS-Req-10.4 | 3799 | ··-·PCI-DSS-Req-10.4 |
| 3795 | ··-·enable_strategy | 3800 | ··-·enable_strategy |
| 3796 | ··-·high_severity | 3801 | ··-·high_severity |
| 3797 | ··-·low_complexity | 3802 | ··-·low_complexity |
| 3798 | ··-·low_disruption | 3803 | ··-·low_disruption |
| 3799 | ··-·no_reboot_needed | 3804 | ··-·no_reboot_needed |
| 3800 | ··-·package_ntp_installed | 3805 | ··-·package_ntp_installed |
| 3801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3802 | [[packages]] | ||
| 3803 | name·=·"ntp" | ||
| 3804 | version·=·"*" | ||
| 3805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3806 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3807 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3807 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3808 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3808 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3809 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3809 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3810 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3810 | include·install_ntp | 3811 | include·install_ntp |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16828, 106 lines modified | Offset 16828, 106 lines modified | ||
| 00041bb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 00041bb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00041bc0:·2369·646d·3430·3737·2220·7461·6269·6e64··#idm4077"·tabind | 00041bc0:·2369·646d·3430·3737·2220·7461·6269·6e64··#idm4077"·tabind | ||
| 00041bd0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00041bd0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00041be0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00041be0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00041bf0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00041bf0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00041c00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00041c00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00041c10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00041c10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00041c20:·5265·6d65·6469·6174·696f·6e20· | 00041c20:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00041c30:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00041c40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041c50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041c60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041c70:·3430·3737·223e·3c70·7265·3e3c·636f·6465··4077"><pre><code | |||
| 00041c80:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 00041c90:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 00041ca0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 00041cb0:·7466·6f72·6d73·0a69·6620·6470·6b67·2d71··tforms.if·dpkg-q | |||
| 00041cc0:·7565·7279·202d·2d73·686f·7720·2d2d·7368··uery·--show·--sh | |||
| 00041cd0:·6f77·666f·726d·6174·3d27·247b·6462·3a53··owformat='${db:S | |||
| 00041ce0:·7461·7475·732d·5374·6174·7573·7d5c·6e27··tatus-Status}\n' | |||
| 00041cf0:·2027·6772·7562·322d·636f·6d6d·6f6e·2720···'grub2-common'· | |||
| 00041d00:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | |||
| 00041d10:·2067·7265·7020·2d71·2069·6e73·7461·6c6c···grep·-q·install | |||
| 00041d20:·6564·2026·616d·703b·2661·6d70·3b20·7b20··ed·&&·{· | |||
| 00041d30:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 00041d40:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 00041d50:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 00041d60:·7461·696e·6572·656e·7620·5d3b·207d·3b20··tainerenv·];·};· | |||
| 00041d70:·7468·656e·0a0a·2320·436f·7272·6563·7420··then..#·Correct· | |||
| 00041d80:·7468·6520·666f·726d·206f·6620·6465·6661··the·form·of·defa | |||
| 00041d90:·756c·7420·6b65·726e·656c·2063·6f6d·6d61··ult·kernel·comma | |||
| 00041da0:·6e64·206c·696e·6520·696e·2047·5255·420a··nd·line·in·GRUB. | |||
| 00041db0:·6966·2067·7265·7020·2d71·2027·5e5c·732a··if·grep·-q·'^\s* | |||
| 00041 | 00041c30:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 00041c40:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00041c50:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00041c60:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041c70:·6170·7365·2220·6964·3d22·6964·6d34·3037··apse"·id="idm407 | |||
| 00041c80:·3722·3e3c·7072·653e·3c63·6f64·653e·5b63··7"><pre><code>[c | |||
| 00041c90:·7573·746f·6d69·7a61·7469·6f6e·732e·6b65··ustomizations.ke | |||
| 00041ca0:·726e·656c·5d0a·6170·7065·6e64·203d·2022··rnel].append·=·" | |||
| 00041cb0:·696f·6d6d·753d·666f·7263·6522·0a3c·2f63··iommu=force".</c | |||
| 00041cc0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00041cd0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00041ce0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00041cf0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00041d00:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00041d10:·6964·6d34·3037·3822·2074·6162·696e·6465··idm4078"·tabinde | |||
| 00041d20:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00041d30:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00041d40:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00041d50:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00041d60:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00041d70:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00041d80:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00041d90:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00041da0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00041db0:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | |||
| 00041dc0:·3037·3822·3e3c·7072·653e·3c63·6f64·653e··078"><pre><code> | |||
| 00041dd0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 00041de0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 00041df0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 00041e00:·666f·726d·730a·6966·2064·706b·672d·7175··forms.if·dpkg-qu | |||
| 00041e10:·6572·7920·2d2d·7368·6f77·202d·2d73·686f··ery·--show·--sho | |||
| 00041e20:·7766·6f72·6d61·743d·2724·7b64·623a·5374··wformat='${db:St | |||
| 00041e30:·6174·7573·2d53·7461·7475·737d·5c6e·2720··atus-Status}\n'· | |||
| 00041e40:·2767·7275·6232·2d63·6f6d·6d6f·6e27·2032··'grub2-common'·2 | |||
| 00041e50:·2667·743b·2f64·6576·2f6e·756c·6c20·7c20··>/dev/null·|· | |||
| 00041e60:·6772·6570·202d·7120·696e·7374·616c·6c65··grep·-q·installe | |||
| 00041e70:·6420·2661·6d70·3b26·616d·703b·207b·205b··d·&&·{·[ | |||
| 00041e80:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 00041e90:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 00041ea0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 00041eb0:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | |||
| 00041ec0:·6865·6e0a·0a23·2043·6f72·7265·6374·2074··hen..#·Correct·t | |||
| 00041ed0:·6865·2066·6f72·6d20·6f66·2064·6566·6175··he·form·of·defau | |||
| 00041ee0:·6c74·206b·6572·6e65·6c20·636f·6d6d·616e··lt·kernel·comman | |||
| 00041ef0:·6420·6c69·6e65·2069·6e20·4752·5542·0a69··d·line·in·GRUB.i | |||
| 00041f00:·6620·6772·6570·202d·7120·275e·5c73·2a47··f·grep·-q·'^\s*G | |||
| 00041f10:·5255·425f·434d·444c·494e·455f·4c49·4e55··RUB_CMDLINE_LINU | |||
| 00041 | 00041f20:·583d·2e2a·696f·6d6d·753d·2e2a·2227·2020··X=.*iommu=.*"'·· | ||
| 00041f30:·272f·6574·632f·6465·6661·756c·742f·6772··'/etc/default/gr | |||
| 00041f40:·7562·2720·3b20·7468·656e·0a20·2020·2020··ub'·;·then.····· | |||
| 00041f50:·2020·2320·6d6f·6469·6679·2074·6865·2047····#·modify·the·G | |||
| 00041f60:·5255·4220·636f·6d6d·616e·642d·6c69·6e65··RUB·command-line | |||
| 00041f70:·2069·6620·616e·2069·6f6d·6d75·3d20·6172···if·an·iommu=·ar | |||
| 00041f80:·6720·616c·7265·6164·7920·6578·6973·7473··g·already·exists | |||
| 00041f90:·0a20·2020·2020·2020·7365·6420·2d69·2022··.·······sed·-i·" | |||
| 00041fa0:·732f·5c28·5e5c·732a·4752·5542·5f43·4d44··s/\(^\s*GRUB_CMD | |||
| 00041fb0:·4c49·4e45·5f4c·494e·5558·3d5c·222e·2a5c··LINE_LINUX=\".*\ | |||
| 00041fc0:·2969·6f6d·6d75·3d5b·5e5b·3a73·7061·6365··)iommu=[^[:space | |||
| 00041fd0:·3a5d·5d5c·2b5c·282e·2a5c·225c·292f·5c31··:]]\+\(.*\"\)/\1 | |||
| 00041fe0:·696f·6d6d·753d·666f·7263·655c·322f·2220··iommu=force\2/"· | |||
| 00041 | 00041ff0:·2027·2f65·7463·2f64·6566·6175·6c74·2f67···'/etc/default/g | ||
| 00041df0:·7275·6227·203b·2074·6865·6e0a·2020·2020··rub'·;·then.···· | |||
| 00041e00:·2020·2023·206d·6f64·6966·7920·7468·6520·····#·modify·the· | |||
| 00041e10:·4752·5542·2063·6f6d·6d61·6e64·2d6c·696e··GRUB·command-lin | |||
| 00041e20:·6520·6966·2061·6e20·696f·6d6d·753d·2061··e·if·an·iommu=·a | |||
| 00041e30:·7267·2061·6c72·6561·6479·2065·7869·7374··rg·already·exist | |||
| 00041e40:·730a·2020·2020·2020·2073·6564·202d·6920··s.·······sed·-i· | |||
| 00041e50:·2273·2f5c·285e·5c73·2a47·5255·425f·434d··"s/\(^\s*GRUB_CM | |||
| 00041e60:·444c·494e·455f·4c49·4e55·583d·5c22·2e2a··DLINE_LINUX=\".* | |||
| 00041e70:·5c29·696f·6d6d·753d·5b5e·5b3a·7370·6163··\)iommu=[^[:spac | |||
| 00041e80:·653a·5d5d·5c2b·5c28·2e2a·5c22·5c29·2f5c··e:]]\+\(.*\"\)/\ | |||
| 00041e90:·3169·6f6d·6d75·3d66·6f72·6365·5c32·2f22··1iommu=force\2/" | |||
| 00041ea0:·2020·272f·6574·632f·6465·6661·756c·742f····'/etc/default/ | |||
| 00041eb0:·6772·7562·270a·2320·4164·6420·746f·2061··grub'.#·Add·to·a | |||
| 0004 | 00042000:·7275·6227·0a23·2041·6464·2074·6f20·616c··rub'.#·Add·to·al | ||
| 00042010:·7265·6164·7920·6578·6973·7469·6e67·2047··ready·existing·G | |||
| 00042020:·5255·425f·434d·444c·494e·455f·4c49·4e55··RUB_CMDLINE_LINU | |||
| 00042030:·5820·7061·7261·6d65·7465·7273·0a65·6c69··X·parameters.eli | |||
| Max diff block lines reached; 130164/144570 bytes (90.04%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 411, 14 lines modified | Offset 411, 17 lines modified | ||
| 411 | enabling·IOMMU·can·cause·hardware·instabilities.·Proper·function·and·stability | 411 | enabling·IOMMU·can·cause·hardware·instabilities.·Proper·function·and·stability |
| 412 | should·be·assessed·before·applying·remediation·to·production·systems. | 412 | should·be·assessed·before·applying·remediation·to·production·systems. |
| 413 | Rationale:··On·x86·architectures,·activating·the·I/OMMU·prevents·the·system | 413 | Rationale:··On·x86·architectures,·activating·the·I/OMMU·prevents·the·system |
| 414 | ············from·arbitrary·accesses·potentially·made·by·hardware·devices. | 414 | ············from·arbitrary·accesses·potentially·made·by·hardware·devices. |
| 415 | Severity: ··unknown | 415 | Severity: ··unknown |
| 416 | Rule·ID:····xccdf_org.ssgproject.content_rule_grub2_enable_iommu_force | 416 | Rule·ID:····xccdf_org.ssgproject.content_rule_grub2_enable_iommu_force |
| 417 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R7 | 417 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R7 |
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | [customizations.kernel] | ||
| 420 | append·=·"iommu=force" | ||
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 419 | #·Remediation·is·applicable·only·in·certain·platforms | 422 | #·Remediation·is·applicable·only·in·certain·platforms |
| 420 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ | 423 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ |
| 421 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ | 424 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ |
| 422 | run/.containerenv·];·};·then | 425 | run/.containerenv·];·};·then |
| 423 | #·Correct·the·form·of·default·kernel·command·line·in·GRUB | 426 | #·Correct·the·form·of·default·kernel·command·line·in·GRUB |
| Offset 436, 17 lines modified | Offset 439, 14 lines modified | ||
| 436 | ·······echo·"GRUB_CMDLINE_LINUX=\"iommu=force\""·>>·'/etc/default/grub' | 439 | ·······echo·"GRUB_CMDLINE_LINUX=\"iommu=force\""·>>·'/etc/default/grub' |
| 437 | fi | 440 | fi |
| 438 | update-grub | 441 | update-grub |
| 439 | else | 442 | else |
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 443 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 441 | fi | 444 | fi |
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 443 | [customizations.kernel] | ||
| 444 | append·=·"iommu=force" | ||
| 445 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules | 445 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules |
| 446 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·syslog·service·has·been·the·default·Unix·logging·mechanism·for·many | 446 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·syslog·service·has·been·the·default·Unix·logging·mechanism·for·many |
| 447 | years.·It·has·a·number·of·downsides,·including·inconsistent·log·format,·lack·of | 447 | years.·It·has·a·number·of·downsides,·including·inconsistent·log·format,·lack·of |
| 448 | authentication·for·received·messages,·and·lack·of·authentication,·encryption, | 448 | authentication·for·received·messages,·and·lack·of·authentication,·encryption, |
| 449 | or·reliable·transport·for·messages·sent·over·a·network.·However,·due·to·its | 449 | or·reliable·transport·for·messages·sent·over·a·network.·However,·due·to·its |
| 450 | long·history,·syslog·is·a·de·facto·standard·which·is·supported·by·almost·all | 450 | long·history,·syslog·is·a·de·facto·standard·which·is·supported·by·almost·all |
| 451 | Unix·applications. | 451 | Unix·applications. |
| Offset 3474, 14 lines modified | Offset 3474, 19 lines modified | ||
| 3474 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3474 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3475 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3475 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3476 | ···························SR·2.7,·SR·7.6 | 3476 | ···························SR·2.7,·SR·7.6 |
| 3477 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3477 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3478 | ···························A.14.2.4,·A.9.1.2 | 3478 | ···························A.14.2.4,·A.9.1.2 |
| 3479 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3479 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3480 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3480 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3482 | [[packages]] | ||
| 3483 | name·=·"cron" | ||
| 3484 | version·=·"*" | ||
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3486 | #·Remediation·is·applicable·only·in·certain·platforms | 3490 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3487 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3491 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3506, 19 lines modified | Offset 3511, 14 lines modified | ||
| 3506 | ··-·NIST-800-53-CM-6(a) | 3511 | ··-·NIST-800-53-CM-6(a) |
| 3507 | ··-·enable_strategy | 3512 | ··-·enable_strategy |
| 3508 | ··-·low_complexity | 3513 | ··-·low_complexity |
| 3509 | ··-·low_disruption | 3514 | ··-·low_disruption |
| 3510 | ··-·medium_severity | 3515 | ··-·medium_severity |
| 3511 | ··-·no_reboot_needed | 3516 | ··-·no_reboot_needed |
| 3512 | ··-·package_cron_installed | 3517 | ··-·package_cron_installed |
| 3513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3514 | [[packages]] | ||
| 3515 | name·=·"cron" | ||
| 3516 | version·=·"*" | ||
| 3517 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3518 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3518 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3519 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3519 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3520 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3520 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3521 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3521 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3522 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3522 | include·install_cron | 3523 | include·install_cron |
| Offset 3903, 14 lines modified | Offset 3903, 19 lines modified | ||
| 3903 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3903 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3904 | References:················4.4.2.4 | 3904 | References:················4.4.2.4 |
| 3905 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3905 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3906 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3906 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3907 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3907 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3908 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3908 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3911 | [[packages]] | ||
| 3912 | name·=·"ntp" | ||
| 3913 | version·=·"*" | ||
| 3910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3914 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3911 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3915 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3912 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3916 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3913 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3917 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3914 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3918 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3915 | #·Remediation·is·applicable·only·in·certain·platforms | 3919 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3916 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3920 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3936, 19 lines modified | Offset 3941, 14 lines modified | ||
| 3936 | ··-·PCI-DSS-Req-10.4 | 3941 | ··-·PCI-DSS-Req-10.4 |
| 3937 | ··-·enable_strategy | 3942 | ··-·enable_strategy |
| 3938 | ··-·high_severity | 3943 | ··-·high_severity |
| 3939 | ··-·low_complexity | 3944 | ··-·low_complexity |
| 3940 | ··-·low_disruption | 3945 | ··-·low_disruption |
| 3941 | ··-·no_reboot_needed | 3946 | ··-·no_reboot_needed |
| 3942 | ··-·package_ntp_installed | 3947 | ··-·package_ntp_installed |
| 3943 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3944 | [[packages]] | ||
| 3945 | name·=·"ntp" | ||
| 3946 | version·=·"*" | ||
| 3947 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3948 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3948 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3949 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3949 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3950 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 6532/12695 bytes (51.45%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 28009, 125 lines modified | Offset 28009, 125 lines modified | ||
| 0006d680:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0006d680:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0006d690:·3131·3033·3222·2074·6162·696e·6465·783d··11032"·tabindex= | 0006d690:·3131·3033·3222·2074·6162·696e·6465·783d··11032"·tabindex= | ||
| 0006d6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0006d6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0006d6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0006d6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0006d6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0006d6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0006d6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0006d6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0006d6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0006d6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0006d6f0:·6564·6961·7469·6f6e·20 | 0006d6f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0006d700:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0006d710:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0006d720:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0006d730:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0006d740:·6522·2069·643d·2269·646d·3131·3033·3222··e"·id="idm11032" | |||
| 0006d750:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0006d760:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0006d770:·2022·6372·6f6e·220a·7665·7273·696f·6e20···"cron".version· | |||
| 0006d780:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0006d790:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0006d7a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0006d7b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0006d7c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0006d7d0:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | |||
| 0006d7e0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0006d7f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0006d800:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0006d810:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0006d820:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0006d830:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0006d840:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0006d | 0006d850:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0006d | 0006d860:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0006d | 0006d870:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0006d | 0006d880:·2220·6964·3d22·6964·6d31·3130·3333·223e··"·id="idm11033"> | ||
| 0006d | 0006d890:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0006d | 0006d8a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0006d | 0006d8b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0006d | 0006d8c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0006d | 0006d8d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0006d | 0006d8e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0006d8f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0006d900:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0006d910:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0006d920:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0006d930:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0006d940:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0006d950:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0006d960:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0006d970:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0006d980:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0006d990:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0006d9a0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0006d9b0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0006d9c0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0006d9d0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0006d9e0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0006d9f0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0006da00:·656e·0a0a·4445·4249·414e·5f46·524f·4e54··en..DEBIAN_FRONT | |||
| 0006da10:·454e·443d·6e6f·6e69·6e74·6572·6163·7469··END=noninteracti | |||
| 0006da20:·7665·2061·7074·2d67·6574·2069·6e73·7461··ve·apt-get·insta | |||
| 0006da30:·6c6c·202d·7920·2263·726f·6e22·0a0a·656c··ll·-y·"cron"..el | |||
| 0006da40:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0006da50:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0006da60:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0006da70:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0006da80:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0006da90:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0006daa0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0006dab0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0006dac0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0006dad0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0006dae0:·646d·3131·3033·3422·2074·6162·696e·6465··dm11034"·tabinde | |||
| 0006daf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0006db00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0006db10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0006db20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0006db30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0006db40:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0006db50:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0006db60:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0006db70:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0006db80:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0006db90:·646d·3131·3033·3422·3e3c·7461·626c·6520··dm11034"><table· | |||
| 0006dba0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0006dbb0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0006dbc0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0006dbd0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0006dbe0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0006dbf0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0006dc00:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0006dc10:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0006d | 0006dc20:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0006d7b0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0006d7c0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0006d7d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0006d7e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0006d7f0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0006d800:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0006d810:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0006d820:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0006d830:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0006d840:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0006d850:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0006d860:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0006d870:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0006d880:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0006d890:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0006d8a0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0006d8b0:·3b20·7468·656e·0a0a·4445·4249·414e·5f46··;·then..DEBIAN_F | |||
| 0006d8c0:·524f·4e54·454e·443d·6e6f·6e69·6e74·6572··RONTEND=noninter | |||
| 0006d8d0:·6163·7469·7665·2061·7074·2d67·6574·2069··active·apt-get·i | |||
| 0006d8e0:·6e73·7461·6c6c·202d·7920·2263·726f·6e22··nstall·-y·"cron" | |||
| Max diff block lines reached; 113852/130880 bytes (86.99%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3415, 14 lines modified | Offset 3415, 19 lines modified | ||
| 3415 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3415 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3416 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3416 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3417 | ···························SR·2.7,·SR·7.6 | 3417 | ···························SR·2.7,·SR·7.6 |
| 3418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3419 | ···························A.14.2.4,·A.9.1.2 | 3419 | ···························A.14.2.4,·A.9.1.2 |
| 3420 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3420 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3423 | [[packages]] | ||
| 3424 | name·=·"cron" | ||
| 3425 | version·=·"*" | ||
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3427 | #·Remediation·is·applicable·only·in·certain·platforms | 3431 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3428 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3432 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3447, 19 lines modified | Offset 3452, 14 lines modified | ||
| 3447 | ··-·NIST-800-53-CM-6(a) | 3452 | ··-·NIST-800-53-CM-6(a) |
| 3448 | ··-·enable_strategy | 3453 | ··-·enable_strategy |
| 3449 | ··-·low_complexity | 3454 | ··-·low_complexity |
| 3450 | ··-·low_disruption | 3455 | ··-·low_disruption |
| 3451 | ··-·medium_severity | 3456 | ··-·medium_severity |
| 3452 | ··-·no_reboot_needed | 3457 | ··-·no_reboot_needed |
| 3453 | ··-·package_cron_installed | 3458 | ··-·package_cron_installed |
| 3454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3455 | [[packages]] | ||
| 3456 | name·=·"cron" | ||
| 3457 | version·=·"*" | ||
| 3458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3463 | include·install_cron | 3464 | include·install_cron |
| Offset 3844, 14 lines modified | Offset 3844, 19 lines modified | ||
| 3844 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3844 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3845 | References:················4.4.2.4 | 3845 | References:················4.4.2.4 |
| 3846 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3846 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3847 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3847 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3848 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3848 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3849 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3849 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3850 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3850 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3852 | [[packages]] | ||
| 3853 | name·=·"ntp" | ||
| 3854 | version·=·"*" | ||
| 3851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3852 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3856 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3853 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3857 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3854 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3858 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3855 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3859 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3856 | #·Remediation·is·applicable·only·in·certain·platforms | 3860 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3857 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3861 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3877, 19 lines modified | Offset 3882, 14 lines modified | ||
| 3877 | ··-·PCI-DSS-Req-10.4 | 3882 | ··-·PCI-DSS-Req-10.4 |
| 3878 | ··-·enable_strategy | 3883 | ··-·enable_strategy |
| 3879 | ··-·high_severity | 3884 | ··-·high_severity |
| 3880 | ··-·low_complexity | 3885 | ··-·low_complexity |
| 3881 | ··-·low_disruption | 3886 | ··-·low_disruption |
| 3882 | ··-·no_reboot_needed | 3887 | ··-·no_reboot_needed |
| 3883 | ··-·package_ntp_installed | 3888 | ··-·package_ntp_installed |
| 3884 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3885 | [[packages]] | ||
| 3886 | name·=·"ntp" | ||
| 3887 | version·=·"*" | ||
| 3888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3890 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3891 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3892 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3893 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3893 | include·install_ntp | 3894 | include·install_ntp |
| Offset 3921, 14 lines modified | Offset 3921, 18 lines modified | ||
| 3921 | ···························4.4.2.4 | 3921 | ···························4.4.2.4 |
| 3922 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3922 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3923 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3923 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3924 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) | 3924 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) |
| 3925 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3925 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3926 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3926 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3927 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 | 3927 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 |
| 3928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3929 | [customizations.services] | ||
| 3930 | enabled·=·["ntp"] | ||
| 3928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3931 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3929 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3932 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3930 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3933 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3931 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3934 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3932 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3935 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3933 | #·Remediation·is·applicable·only·in·certain·platforms | 3936 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3934 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·- | 3937 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·- |
| Offset 3989, 18 lines modified | Offset 3993, 14 lines modified | ||
| 3989 | ··-·PCI-DSSv4-10.6.1 | 3993 | ··-·PCI-DSSv4-10.6.1 |
| 3990 | ··-·enable_strategy | 3994 | ··-·enable_strategy |
| 3991 | ··-·high_severity | 3995 | ··-·high_severity |
| 3992 | ··-·low_complexity | 3996 | ··-·low_complexity |
| 3993 | ··-·low_disruption | 3997 | ··-·low_disruption |
| 3994 | ··-·no_reboot_needed | 3998 | ··-·no_reboot_needed |
| 3995 | ··-·service_ntp_enabled | 3999 | ··-·service_ntp_enabled |
| 3996 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3997 | [customizations.services] | ||
| 3998 | enabled·=·["ntp"] | ||
| 3999 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4000 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 5007/10847 bytes (46.16%) of diff not shown. | |||
| Offset 14282, 16 lines modified | Offset 14282, 16 lines modified | ||
| 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d00:·2028·6173·206f·6620·3230·323 | 00037d00:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037d10:·323 | 00037d10:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 51394, 213 lines modified | Offset 51394, 213 lines modified | ||
| 000c8c10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 000c8c10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 000c8c20:·3135·3130·3222·2074·6162·696e·6465·783d··15102"·tabindex= | 000c8c20:·3135·3130·3222·2074·6162·696e·6465·783d··15102"·tabindex= | ||
| 000c8c30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 000c8c30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 000c8c40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 000c8c40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 000c8c50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 000c8c50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 000c8c60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 000c8c60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 000c8c70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 000c8c70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 000c8c80:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 000c8c90:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 000c8ca0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000c8cb0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000c8cc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000c8cd0:·6522·2069·643d·2269·646d·3135·3130·3222··e"·id="idm15102" | |||
| 000c8ce0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 000c8cf0:·7374·6f6d·697a·6174·696f·6e73·2e73·6572··stomizations.ser | |||
| 000c8d00:·7669·6365·735d·0a65·6e61·626c·6564·203d··vices].enabled·= | |||
| 000c8d10:·205b·2261·7564·6974·6422·5d0a·3c2f·636f···["auditd"].</co | |||
| 000c8d20:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000c8d30:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000c8d40:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 000c8d50:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 000c8d60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 000c8d70:·646d·3135·3130·3322·2074·6162·696e·6465··dm15103"·tabinde | |||
| 000c8d80:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 000c8d90:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 000c8da0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 000c8db0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 000c8dc0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 000c8 | 000c8dd0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 000c8 | 000c8de0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 000c8 | 000c8df0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 000c8 | 000c8e00:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 000c8 | 000c8e10:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 000c8 | 000c8e20:·3531·3033·223e·3c74·6162·6c65·2063·6c61··5103"><table·cla | ||
| 000c8 | 000c8e30:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 000c8 | 000c8e40:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 000c8 | 000c8e50:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 000c8 | 000c8e60:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 000c8 | 000c8e70:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 000c8 | 000c8e80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 000c8 | 000c8e90:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 000c8 | 000c8ea0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 000c8 | 000c8eb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 000c8 | 000c8ec0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 000c8 | 000c8ed0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 000c8 | 000c8ee0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 000c8 | 000c8ef0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 000c8 | 000c8f00:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 000c8 | 000c8f10:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 000c8 | 000c8f20:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 000c8 | 000c8f30:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000c8 | 000c8f40:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 000c8 | 000c8f50:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | ||
| 000c8 | 000c8f60:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | ||
| 000c8 | 000c8f70:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | ||
| 000c8 | 000c8f80:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | ||
| 000c8 | 000c8f90:·205d·2026·616d·703b·2661·6d70·3b20·7b20···]·&&·{· | ||
| 000c8 | 000c8fa0:·6470·6b67·2d71·7565·7279·202d·2d73·686f··dpkg-query·--sho | ||
| 000c8 | 000c8fb0:·7720·2d2d·7368·6f77·666f·726d·6174·3d27··w·--showformat=' | ||
| 000c8 | 000c8fc0:·247b·6462·3a53·7461·7475·732d·5374·6174··${db:Status-Stat | ||
| 000c8 | 000c8fd0:·7573·7d5c·6e27·2027·6175·6469·7464·2720··us}\n'·'auditd'· | ||
| 000c8 | 000c8fe0:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | ||
| 000c8 | 000c8ff0:·2067·7265·7020·2d71·2069·6e73·7461·6c6c···grep·-q·install | ||
| 000c | 000c9000:·6564·3b20·7d3b·2074·6865·6e0a·0a53·5953··ed;·};·then..SYS | ||
| 000c | 000c9010:·5445·4d43·544c·5f45·5845·433d·272f·7573··TEMCTL_EXEC='/us | ||
| 000c | 000c9020:·722f·6269·6e2f·7379·7374·656d·6374·6c27··r/bin/systemctl' | ||
| 000c | 000c9030:·0a22·2453·5953·5445·4d43·544c·5f45·5845··."$SYSTEMCTL_EXE | ||
| 000c | 000c9040:·4322·2075·6e6d·6173·6b20·2761·7564·6974··C"·unmask·'audit | ||
| 000c | 000c9050:·642e·7365·7276·6963·6527·0a22·2453·5953··d.service'."$SYS | ||
| 000c | 000c9060:·5445·4d43·544c·5f45·5845·4322·2073·7461··TEMCTL_EXEC"·sta | ||
| 000c | 000c9070:·7274·2027·6175·6469·7464·2e73·6572·7669··rt·'auditd.servi | ||
| 000c8 | 000c9080:·6365·270a·2224·5359·5354·454d·4354·4c5f··ce'."$SYSTEMCTL_ | ||
| 000c | 000c9090:·4558·4543·2220·656e·6162·6c65·2027·6175··EXEC"·enable·'au | ||
| 000c | 000c90a0:·6469·7464·2e73·6572·7669·6365·270a·0a65··ditd.service'..e | ||
| 000c | 000c90b0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 000c | 000c90c0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 000c | 000c90d0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 000c | 000c90e0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 000c | 000c90f0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 000c8fb0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 000c8fc0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 000c8fd0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 000c8fe0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 000c8ff0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 000c9000:·6d31·3531·3033·2220·7461·6269·6e64·6578··m15103"·tabindex | |||
| 000c9010:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 000c9020:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 000c9030:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 000c9040:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 000c9050:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 000c9060:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 000c9070:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 000c9080:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000c9090:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000c90a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000c90b0:·6d31·3531·3033·223e·3c74·6162·6c65·2063··m15103"><table·c | |||
| 000c90c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000c90d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000c90e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000c90f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000c9100:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000c9110:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000c9120:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 000c9130:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 000c9140:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000c9150:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000c9160:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000c9170:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 000c9180:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 000c9190:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| Max diff block lines reached; 414/29724 bytes (1.39%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 9161, 14 lines modified | Offset 9161, 18 lines modified | ||
| 9161 | ···························00139,·SRG-OS-000352-GPOS-00140,·SRG-OS-000353-GPOS-00141,·SRG- | 9161 | ···························00139,·SRG-OS-000352-GPOS-00140,·SRG-OS-000353-GPOS-00141,·SRG- |
| 9162 | ···························OS-000354-GPOS-00142,·SRG-OS-000358-GPOS-00145,·SRG-OS-000365- | 9162 | ···························OS-000354-GPOS-00142,·SRG-OS-000358-GPOS-00145,·SRG-OS-000365- |
| 9163 | ···························GPOS-00152,·SRG-OS-000392-GPOS-00172,·SRG-OS-000475-GPOS-00220 | 9163 | ···························GPOS-00152,·SRG-OS-000392-GPOS-00172,·SRG-OS-000475-GPOS-00220 |
| 9164 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000095-CTR-000170,·SRG-APP-000409-CTR-000990,·SRG-APP- | 9164 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000095-CTR-000170,·SRG-APP-000409-CTR-000990,·SRG-APP- |
| 9165 | ···························000508-CTR-001300,·SRG-APP-000510-CTR-001310 | 9165 | ···························000508-CTR-001300,·SRG-APP-000510-CTR-001310 |
| 9166 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R33,·R73 | 9166 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R33,·R73 |
| 9167 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1 | 9167 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1 |
| 9168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9169 | [customizations.services] | ||
| 9170 | enabled·=·["auditd"] | ||
| 9168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9173 | #·Remediation·is·applicable·only·in·certain·platforms | 9176 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·-- | 9177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·-- |
| Offset 9249, 18 lines modified | Offset 9253, 14 lines modified | ||
| 9249 | ··-·PCI-DSSv4-10.2.1 | 9253 | ··-·PCI-DSSv4-10.2.1 |
| 9250 | ··-·enable_strategy | 9254 | ··-·enable_strategy |
| 9251 | ··-·low_complexity | 9255 | ··-·low_complexity |
| 9252 | ··-·low_disruption | 9256 | ··-·low_disruption |
| 9253 | ··-·medium_severity | 9257 | ··-·medium_severity |
| 9254 | ··-·no_reboot_needed | 9258 | ··-·no_reboot_needed |
| 9255 | ··-·service_auditd_enabled | 9259 | ··-·service_auditd_enabled |
| 9256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9257 | [customizations.services] | ||
| 9258 | enabled·=·["auditd"] | ||
| 9259 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9260 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9261 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9262 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9263 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9264 | include·enable_auditd | 9265 | include·enable_auditd |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19732, 125 lines modified | Offset 19732, 125 lines modified | ||
| 0004d130:·7267·6574·3d22·2369·646d·3439·3336·2220··rget="#idm4936"· | 0004d130:·7267·6574·3d22·2369·646d·3439·3336·2220··rget="#idm4936"· | ||
| 0004d140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004d140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004d150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004d150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004d160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004d160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004d170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004d170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004d180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004d180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004d190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004d190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004d1a0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0004d1b0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0004d1c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004d1d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004d1e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004d1f0:·6964·6d34·3933·3622·3e3c·7072·653e·3c63··idm4936"><pre><c | |||
| 0004d200:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0004d210:·5d0a·6e61·6d65·203d·2022·7273·7973·6c6f··].name·=·"rsyslo | |||
| 0004d220:·6722·0a76·6572·7369·6f6e·203d·2022·2a22··g".version·=·"*" | |||
| 0004d1a0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0004d1b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004d1c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004d1d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004d1e0:·643d·2269·646d·3439·3336·223e·3c74·6162··d="idm4936"><tab | |||
| 0004d1f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004d200:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004d210:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004d220:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004d230:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004d240:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004d250:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004d260:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004d270:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004d280:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004d290:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004d2a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004d2b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004d2c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0004d2d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004d2e0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0004d2f0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0004d300:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0004d310:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0004d320:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0004d330:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0004d340:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0004d350:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0004d360:·4445·4249·414e·5f46·524f·4e54·454e·443d··DEBIAN_FRONTEND= | |||
| 0004d370:·6e6f·6e69·6e74·6572·6163·7469·7665·2061··noninteractive·a | |||
| 0004d380:·7074·2d67·6574·2069·6e73·7461·6c6c·202d··pt-get·install·- | |||
| 0004d390:·7920·2272·7379·736c·6f67·220a·0a65·6c73··y·"rsyslog"..els | |||
| 0004d3a0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0004d3b0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0004d3c0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0004d3d0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0004d3e0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0004d3f0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0004d400:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0004d410:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0004d420:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0004d430:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0004d440:·6d34·3933·3722·2074·6162·696e·6465·783d··m4937"·tabindex= | |||
| 0004d450:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004d460:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004d470:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004d480:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004d490:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004d4a0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0004d4b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004d4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004d4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004d4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004d4f0:·3439·3337·223e·3c74·6162·6c65·2063·6c61··4937"><table·cla | |||
| 0004d500:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0004d510:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0004d520:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0004d530:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0004d540:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0004d550:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004d560:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004d570:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0004d580:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004d590:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0004d5a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0004d5b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0004d5c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0004d5d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0004d5e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0004d5f0:·6e61·6d65·3a20·456e·7375·7265·2072·7379··name:·Ensure·rsy | |||
| 0004d600:·736c·6f67·2069·7320·696e·7374·616c·6c65··slog·is·installe | |||
| 0004d610:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0004d620:·206e·616d·653a·2072·7379·736c·6f67·0a20···name:·rsyslog.· | |||
| 0004d630:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0004d640:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0004d650:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0004d660:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0004d670:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0004d680:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0004d690:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0004d6a0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | |||
| 0004d6b0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0004d6c0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0004d6d0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0004d6e0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0004d6f0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0004d700:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0004d710:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0004d720:·6564·0a20·202d·2070·6163·6b61·6765·5f72··ed.··-·package_r | |||
| 0004d730:·7379·736c·6f67·5f69·6e73·7461·6c6c·6564··syslog_installed | |||
| 0004d | 0004d230:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0004d | 0004d240:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0004d | 0004d250:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0004d | 0004d260:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0004d | 0004d270:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| Max diff block lines reached; 169688/186716 bytes (90.88%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1549, 14 lines modified | Offset 1549, 19 lines modified | ||
| 1549 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1549 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1550 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1550 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1551 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1551 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1552 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1552 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1553 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1553 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1554 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1554 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1555 | ···························SRG-OS-000480-GPOS-00227 | 1555 | ···························SRG-OS-000480-GPOS-00227 |
| 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1557 | [[packages]] | ||
| 1558 | name·=·"rsyslog" | ||
| 1559 | version·=·"*" | ||
| 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1561 | #·Remediation·is·applicable·only·in·certain·platforms | 1565 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1562 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1566 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1581, 19 lines modified | Offset 1586, 14 lines modified | ||
| 1581 | ··-·NIST-800-53-CM-6(a) | 1586 | ··-·NIST-800-53-CM-6(a) |
| 1582 | ··-·enable_strategy | 1587 | ··-·enable_strategy |
| 1583 | ··-·low_complexity | 1588 | ··-·low_complexity |
| 1584 | ··-·low_disruption | 1589 | ··-·low_disruption |
| 1585 | ··-·medium_severity | 1590 | ··-·medium_severity |
| 1586 | ··-·no_reboot_needed | 1591 | ··-·no_reboot_needed |
| 1587 | ··-·package_rsyslog_installed | 1592 | ··-·package_rsyslog_installed |
| 1588 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1589 | [[packages]] | ||
| 1590 | name·=·"rsyslog" | ||
| 1591 | version·=·"*" | ||
| 1592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1593 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1594 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1595 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1596 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1597 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1597 | include·install_rsyslog | 1598 | include·install_rsyslog |
| Offset 1623, 14 lines modified | Offset 1623, 18 lines modified | ||
| 1623 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1623 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1624 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1624 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1625 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1625 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1626 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1626 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1627 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1627 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1628 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1628 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1631 | [customizations.services] | ||
| 1632 | enabled·=·["rsyslog"] | ||
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1634 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1635 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1636 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1637 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1635 | #·Remediation·is·applicable·only·in·certain·platforms | 1638 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1636 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1639 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1670, 18 lines modified | Offset 1674, 14 lines modified | ||
| 1670 | ··-·NIST-800-53-CM-6(a) | 1674 | ··-·NIST-800-53-CM-6(a) |
| 1671 | ··-·enable_strategy | 1675 | ··-·enable_strategy |
| 1672 | ··-·low_complexity | 1676 | ··-·low_complexity |
| 1673 | ··-·low_disruption | 1677 | ··-·low_disruption |
| 1674 | ··-·medium_severity | 1678 | ··-·medium_severity |
| 1675 | ··-·no_reboot_needed | 1679 | ··-·no_reboot_needed |
| 1676 | ··-·service_rsyslog_enabled | 1680 | ··-·service_rsyslog_enabled |
| 1677 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1678 | [customizations.services] | ||
| 1679 | enabled·=·["rsyslog"] | ||
| 1680 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1681 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1681 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1682 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1682 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1683 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1683 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1684 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1684 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1685 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1685 | include·enable_rsyslog | 1686 | include·enable_rsyslog |
| Offset 3379, 14 lines modified | Offset 3379, 19 lines modified | ||
| 3379 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3379 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3380 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3380 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3381 | ···························SR·2.7,·SR·7.6 | 3381 | ···························SR·2.7,·SR·7.6 |
| 3382 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3382 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3383 | ···························A.14.2.4,·A.9.1.2 | 3383 | ···························A.14.2.4,·A.9.1.2 |
| 3384 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3384 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3385 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3385 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3387 | [[packages]] | ||
| 3388 | name·=·"cron" | ||
| 3389 | version·=·"*" | ||
| 3386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3391 | #·Remediation·is·applicable·only·in·certain·platforms | 3395 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3392 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3396 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3411, 19 lines modified | Offset 3416, 14 lines modified | ||
| 3411 | ··-·NIST-800-53-CM-6(a) | 3416 | ··-·NIST-800-53-CM-6(a) |
| 3412 | ··-·enable_strategy | 3417 | ··-·enable_strategy |
| 3413 | ··-·low_complexity | 3418 | ··-·low_complexity |
| 3414 | ··-·low_disruption | 3419 | ··-·low_disruption |
| 3415 | ··-·medium_severity | 3420 | ··-·medium_severity |
| 3416 | ··-·no_reboot_needed | 3421 | ··-·no_reboot_needed |
| 3417 | ··-·package_cron_installed | 3422 | ··-·package_cron_installed |
| 3418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3419 | [[packages]] | ||
| 3420 | name·=·"cron" | ||
| 3421 | version·=·"*" | ||
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9854/15801 bytes (62.36%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d30:·2d3 | 00037d30:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15095, 131 lines modified | Offset 15095, 131 lines modified | ||
| 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | ||
| 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003afd0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003afd0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003afe0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003aff0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b000:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b010:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b020:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003afe0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003aff0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b000:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b010:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b020:·6d32·3733·3522·3e3c·7461·626c·6520·636c··m2735"><table·cl | |||
| 0003b030:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b040:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b050:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b060:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b070:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b0a0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b0b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0c0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b0d0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b0e0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b0f0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b100:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b | 0003b030:·3335·223e·3c70·7265·3e3c·636f·6465·3e0a··35"><pre><code>. | ||
| 0003b040:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b050:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b060:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b130:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b140:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b150:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003b160:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b170:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b180:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b190:·7620·5d3b·2074·6865·6e0a·0a44·4542·4941··v·];·then..DEBIA | |||
| 0003b1a0:·4e5f·4652·4f4e·5445·4e44·3d6e·6f6e·696e··N_FRONTEND=nonin | |||
| 0003b1b0:·7465·7261·6374·6976·6520·6170·742d·6765··teractive·apt-ge | |||
| 0003b1c0:·7420·696e·7374·616c·6c20·2d79·2022·6169··t·install·-y·"ai | |||
| 0003b1d0:·6465·220a·0a65·6c73·650a·2020·2020·2667··de"..else.····&g | |||
| 0003b1e0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b1f0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b200:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b210:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b220:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b230:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b240:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b250:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b260:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b270:·6765·743d·2223·6964·6d32·3733·3622·2074··get="#idm2736"·t | |||
| 0003b280:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b290:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b2a0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b2b0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b2c0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b2d0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b2e0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b2f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b300:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b310:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b320:·2069·643d·2269·646d·3237·3336·223e·3c74···id="idm2736"><t | |||
| 0003b330:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b340:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b350:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b360:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b370:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b380:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b390:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b3a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b3b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b3c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b3d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b3e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b3f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b400:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b410:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b420:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b430:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b440:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b450:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b460:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b470:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b480:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b490:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b4a0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b4b0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b4c0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b4d0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b4e0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b4f0:·4449·5341·2d53·5449·472d·5542·5455·2d32··DISA-STIG-UBTU-2 | |||
| 0003b500:·302d·3031·3034·3530·0a20·202d·204e·4953··0-010450.··-·NIS | |||
| 0003b510:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b520:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b530:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b540:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b550:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b560:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b570:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b580:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b590:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b5a0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b5b0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| Max diff block lines reached; 533802/551796 bytes (96.74%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 14 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 134 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 156, 19 lines modified | Offset 161, 14 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 163 | ··-·low_complexity |
| 159 | ··-·low_disruption | 164 | ··-·low_disruption |
| 160 | ··-·medium_severity | 165 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 173 | include·install_aide |
| Offset 791, 14 lines modified | Offset 791, 19 lines modified | ||
| 791 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 791 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 792 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 792 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 793 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 793 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 794 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 794 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 795 | ············_\x8c_\x8i_\x8s·····1.3.1 | 795 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 796 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 796 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 797 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 797 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 798 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 799 | [[packages]] | ||
| 800 | name·=·"sudo" | ||
| 801 | version·=·"*" | ||
| 798 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 799 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 803 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 800 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 804 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 801 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 805 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 802 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 806 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 803 | #·Remediation·is·applicable·only·in·certain·platforms | 807 | #·Remediation·is·applicable·only·in·certain·platforms |
| 804 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 808 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 823, 19 lines modified | Offset 828, 14 lines modified | ||
| 823 | ··-·PCI-DSSv4-2.2.6 | 828 | ··-·PCI-DSSv4-2.2.6 |
| 824 | ··-·enable_strategy | 829 | ··-·enable_strategy |
| 825 | ··-·low_complexity | 830 | ··-·low_complexity |
| 826 | ··-·low_disruption | 831 | ··-·low_disruption |
| 827 | ··-·medium_severity | 832 | ··-·medium_severity |
| 828 | ··-·no_reboot_needed | 833 | ··-·no_reboot_needed |
| 829 | ··-·package_sudo_installed | 834 | ··-·package_sudo_installed |
| 830 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 831 | [[packages]] | ||
| 832 | name·=·"sudo" | ||
| 833 | version·=·"*" | ||
| 834 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 835 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 836 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 837 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 838 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 839 | include·install_sudo | 840 | include·install_sudo |
| Offset 3348, 14 lines modified | Offset 3348, 19 lines modified | ||
| 3348 | Severity: ··medium | 3348 | Severity: ··medium |
| 3349 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3349 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3350 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3350 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3351 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3351 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3352 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3352 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3353 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3353 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3354 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3354 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3356 | [[packages]] | ||
| 3357 | name·=·"libpam-pwquality" | ||
| 3358 | version·=·"*" | ||
| 3355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3360 | #·Remediation·is·applicable·only·in·certain·platforms | 3364 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3361 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 3365 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 3392, 19 lines modified | Offset 3397, 14 lines modified | ||
| 3392 | ··-·DISA-STIG-UBTU-20-010057 | 3397 | ··-·DISA-STIG-UBTU-20-010057 |
| 3393 | ··-·enable_strategy | 3398 | ··-·enable_strategy |
| 3394 | ··-·low_complexity | 3399 | ··-·low_complexity |
| 3395 | ··-·low_disruption | 3400 | ··-·low_disruption |
| 3396 | ··-·medium_severity | 3401 | ··-·medium_severity |
| 3397 | ··-·no_reboot_needed | 3402 | ··-·no_reboot_needed |
| 3398 | ··-·package_pam_pwquality_installed | 3403 | ··-·package_pam_pwquality_installed |
| 3399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3400 | [[packages]] | ||
| 3401 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 38630/44070 bytes (87.66%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d40:·3 | 00037d40:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15091, 130 lines modified | Offset 15091, 130 lines modified | ||
| 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | ||
| 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003af90:·6d65·6469·6174·696f·6e20· | 0003af90:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003afa0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003afb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003afc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003afd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003afe0:·7365·2220·6964·3d22·6964·6d32·3733·3522··se"·id="idm2735" | |||
| 0003afa0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003afb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003afc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003afd0:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003afe0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | |||
| 0003aff0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b000:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b010:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b020:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b030:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b040:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b050:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b060:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b070:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b080:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b090:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b0a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b0b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b0c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003 | 0003aff0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b000:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b010:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b020:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b0e0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b0f0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b100:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b110:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003b120:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b130:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b140:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b150:·3b20·7468·656e·0a0a·4445·4249·414e·5f46··;·then..DEBIAN_F | |||
| 0003b160:·524f·4e54·454e·443d·6e6f·6e69·6e74·6572··RONTEND=noninter | |||
| 0003b170:·6163·7469·7665·2061·7074·2d67·6574·2069··active·apt-get·i | |||
| 0003b180:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b190:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b1a0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b1b0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b1c0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b1d0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b1e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b1f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b200:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b210:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b220:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b230:·3d22·2369·646d·3237·3336·2220·7461·6269··="#idm2736"·tabi | |||
| 0003b240:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b250:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b260:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b270:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b280:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b290:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b2a0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b2b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b2c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b2d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b2e0:·3d22·6964·6d32·3733·3622·3e3c·7461·626c··="idm2736"><tabl | |||
| 0003b2f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b300:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b310:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b320:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b330:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b340:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b350:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b360:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b370:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b380:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b390:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b3a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b3b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b3c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b3d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b3e0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b3f0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b400:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b410:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b420:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b430:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b440:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b450:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b460:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b470:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b480:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b490:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b4a0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b4b0:·412d·5354·4947·2d55·4254·552d·3230·2d30··A-STIG-UBTU-20-0 | |||
| 0003b4c0:·3130·3435·300a·2020·2d20·4e49·5354·2d38··10450.··-·NIST-8 | |||
| 0003b4d0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b4e0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b4f0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b500:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b510:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b520:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b530:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b540:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b550:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b560:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b570:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| Max diff block lines reached; 427691/445547 bytes (95.99%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 19 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 19 lines modified | Offset 160, 14 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 162 | ··-·low_complexity |
| 158 | ··-·low_disruption | 163 | ··-·low_disruption |
| 159 | ··-·medium_severity | 164 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | include·install_aide | 172 | include·install_aide |
| Offset 903, 14 lines modified | Offset 903, 19 lines modified | ||
| 903 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 903 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 904 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 904 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 905 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 905 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 906 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 906 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 907 | ············_\x8c_\x8i_\x8s·····1.3.1 | 907 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 908 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 908 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 911 | [[packages]] | ||
| 912 | name·=·"sudo" | ||
| 913 | version·=·"*" | ||
| 910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 914 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 911 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 915 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 912 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 916 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 913 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 917 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 914 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 918 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 915 | #·Remediation·is·applicable·only·in·certain·platforms | 919 | #·Remediation·is·applicable·only·in·certain·platforms |
| 916 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 920 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 935, 19 lines modified | Offset 940, 14 lines modified | ||
| 935 | ··-·PCI-DSSv4-2.2.6 | 940 | ··-·PCI-DSSv4-2.2.6 |
| 936 | ··-·enable_strategy | 941 | ··-·enable_strategy |
| 937 | ··-·low_complexity | 942 | ··-·low_complexity |
| 938 | ··-·low_disruption | 943 | ··-·low_disruption |
| 939 | ··-·medium_severity | 944 | ··-·medium_severity |
| 940 | ··-·no_reboot_needed | 945 | ··-·no_reboot_needed |
| 941 | ··-·package_sudo_installed | 946 | ··-·package_sudo_installed |
| 942 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 943 | [[packages]] | ||
| 944 | name·=·"sudo" | ||
| 945 | version·=·"*" | ||
| 946 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 947 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 947 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 948 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 948 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 949 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 949 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 950 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 950 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 951 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 951 | include·install_sudo | 952 | include·install_sudo |
| Offset 3796, 14 lines modified | Offset 3796, 19 lines modified | ||
| 3796 | Severity: ··medium | 3796 | Severity: ··medium |
| 3797 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3797 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3798 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3798 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3799 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3799 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3800 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3800 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3801 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3801 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3802 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3802 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3804 | [[packages]] | ||
| 3805 | name·=·"libpam-pwquality" | ||
| 3806 | version·=·"*" | ||
| 3803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3804 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3808 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3805 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3809 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3806 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3810 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3807 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3811 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3808 | #·Remediation·is·applicable·only·in·certain·platforms | 3812 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3809 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 3813 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 3840, 19 lines modified | Offset 3845, 14 lines modified | ||
| 3840 | ··-·DISA-STIG-UBTU-20-010057 | 3845 | ··-·DISA-STIG-UBTU-20-010057 |
| 3841 | ··-·enable_strategy | 3846 | ··-·enable_strategy |
| 3842 | ··-·low_complexity | 3847 | ··-·low_complexity |
| 3843 | ··-·low_disruption | 3848 | ··-·low_disruption |
| 3844 | ··-·medium_severity | 3849 | ··-·medium_severity |
| 3845 | ··-·no_reboot_needed | 3850 | ··-·no_reboot_needed |
| 3846 | ··-·package_pam_pwquality_installed | 3851 | ··-·package_pam_pwquality_installed |
| 3847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3848 | [[packages]] | ||
| 3849 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 30426/35876 bytes (84.81%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d30:·2d3 | 00037d30:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15118, 130 lines modified | Offset 15118, 130 lines modified | ||
| 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | ||
| 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b140:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b150:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b160:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b170:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b180:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b190:·6964·3d22·6964·6d32·3733·3522·3e3c·7072··id="idm2735"><pr | |||
| 0003b1a0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b1b0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b1c0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b140:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b150:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b160:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b170:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b180:·6522·2069·643d·2269·646d·3237·3335·223e··e"·id="idm2735"> | |||
| 0003b190:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b1a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b1b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b1c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b1d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b1e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b1f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b200:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b210:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b220:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b230:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b240:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b250:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b260:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b270:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b280:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b290:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b2a0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b2b0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b2c0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b2d0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b2e0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b2f0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b300:·656e·0a0a·4445·4249·414e·5f46·524f·4e54··en..DEBIAN_FRONT | |||
| 0003b310:·454e·443d·6e6f·6e69·6e74·6572·6163·7469··END=noninteracti | |||
| 0003b320:·7665·2061·7074·2d67·6574·2069·6e73·7461··ve·apt-get·insta | |||
| 0003b330:·6c6c·202d·7920·2261·6964·6522·0a0a·656c··ll·-y·"aide"..el | |||
| 0003b340:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b350:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b360:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b370:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b380:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b390:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b3a0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b3b0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b3c0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b3d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b3e0:·646d·3237·3336·2220·7461·6269·6e64·6578··dm2736"·tabindex | |||
| 0003b3f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b400:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b410:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b420:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b430:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b440:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b450:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b460:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b470:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b480:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b490:·6d32·3733·3622·3e3c·7461·626c·6520·636c··m2736"><table·cl | |||
| 0003b4a0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b4b0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b4c0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b4d0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b4e0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b4f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b500:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b510:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b520:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b530:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b540:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b550:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b560:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b570:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b580:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b590:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b5a0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b5b0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b5c0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b5d0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b5e0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b5f0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b600:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b610:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b620:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b630:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b640:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b650:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b660:·4947·2d55·4254·552d·3230·2d30·3130·3435··IG-UBTU-20-01045 | |||
| 0003b670:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b680:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b690:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b6a0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b6b0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b6c0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b6d0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b6e0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b6f0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b700:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b710:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| Max diff block lines reached; 609684/627540 bytes (97.15%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 14 lines modified | Offset 124, 19 lines modified | ||
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 127 | ············_\x8c_\x8i_\x8s············1.4.1 | 127 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | 140 | #·Remediation·is·applicable·only·in·certain·platforms |
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 159, 19 lines modified | Offset 164, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 166 | ··-·low_complexity |
| 162 | ··-·low_disruption | 167 | ··-·low_disruption |
| 163 | ··-·medium_severity | 168 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | 176 | include·install_aide |
| Offset 895, 14 lines modified | Offset 895, 19 lines modified | ||
| 895 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 895 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 896 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 896 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 897 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 897 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 898 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 898 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 899 | ············_\x8c_\x8i_\x8s·····1.3.1 | 899 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 900 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 900 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 901 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 901 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 903 | [[packages]] | ||
| 904 | name·=·"sudo" | ||
| 905 | version·=·"*" | ||
| 902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 907 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 908 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 909 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 910 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 907 | #·Remediation·is·applicable·only·in·certain·platforms | 911 | #·Remediation·is·applicable·only·in·certain·platforms |
| 908 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 912 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 927, 19 lines modified | Offset 932, 14 lines modified | ||
| 927 | ··-·PCI-DSSv4-2.2.6 | 932 | ··-·PCI-DSSv4-2.2.6 |
| 928 | ··-·enable_strategy | 933 | ··-·enable_strategy |
| 929 | ··-·low_complexity | 934 | ··-·low_complexity |
| 930 | ··-·low_disruption | 935 | ··-·low_disruption |
| 931 | ··-·medium_severity | 936 | ··-·medium_severity |
| 932 | ··-·no_reboot_needed | 937 | ··-·no_reboot_needed |
| 933 | ··-·package_sudo_installed | 938 | ··-·package_sudo_installed |
| 934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 935 | [[packages]] | ||
| 936 | name·=·"sudo" | ||
| 937 | version·=·"*" | ||
| 938 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 939 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 939 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 940 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 940 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 941 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 941 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 942 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 942 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 943 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 943 | include·install_sudo | 944 | include·install_sudo |
| Offset 3452, 14 lines modified | Offset 3452, 19 lines modified | ||
| 3452 | Severity: ··medium | 3452 | Severity: ··medium |
| 3453 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3453 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3454 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3454 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3455 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3455 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3456 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3456 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3457 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3457 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3458 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3458 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3460 | [[packages]] | ||
| 3461 | name·=·"libpam-pwquality" | ||
| 3462 | version·=·"*" | ||
| 3459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3464 | #·Remediation·is·applicable·only·in·certain·platforms | 3468 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3465 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 3469 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 3496, 19 lines modified | Offset 3501, 14 lines modified | ||
| 3496 | ··-·DISA-STIG-UBTU-20-010057 | 3501 | ··-·DISA-STIG-UBTU-20-010057 |
| 3497 | ··-·enable_strategy | 3502 | ··-·enable_strategy |
| 3498 | ··-·low_complexity | 3503 | ··-·low_complexity |
| 3499 | ··-·low_disruption | 3504 | ··-·low_disruption |
| 3500 | ··-·medium_severity | 3505 | ··-·medium_severity |
| 3501 | ··-·no_reboot_needed | 3506 | ··-·no_reboot_needed |
| 3502 | ··-·package_pam_pwquality_installed | 3507 | ··-·package_pam_pwquality_installed |
| 3503 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3504 | [[packages]] | ||
| 3505 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 45859/51299 bytes (89.40%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d40:·3 | 00037d40:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15114, 130 lines modified | Offset 15114, 130 lines modified | ||
| 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | ||
| 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b100:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b110:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b120:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b130:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b140:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b150:·6964·6d32·3733·3522·3e3c·7072·653e·3c63··idm2735"><pre><c | |||
| 0003b160:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b170:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b180:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b100:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b110:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b120:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b130:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b140:·643d·2269·646d·3237·3335·223e·3c74·6162··d="idm2735"><tab | |||
| 0003b150:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b160:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b170:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b180:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b190:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b1a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b1c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b1d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b1f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b200:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b210:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b220:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b230:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b240:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b250:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b260:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b270:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b280:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b290:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b2a0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b2b0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b2c0:·4445·4249·414e·5f46·524f·4e54·454e·443d··DEBIAN_FRONTEND= | |||
| 0003b2d0:·6e6f·6e69·6e74·6572·6163·7469·7665·2061··noninteractive·a | |||
| 0003b2e0:·7074·2d67·6574·2069·6e73·7461·6c6c·202d··pt-get·install·- | |||
| 0003b2f0:·7920·2261·6964·6522·0a0a·656c·7365·0a20··y·"aide"..else.· | |||
| 0003b300:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b310:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b320:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b330:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b340:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b350:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b360:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b370:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b380:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b390:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | |||
| 0003b3a0:·3336·2220·7461·6269·6e64·6578·3d22·3022··36"·tabindex="0" | |||
| 0003b3b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b3c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b3d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b3e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b3f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b400:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b450:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b460:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b470:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b480:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b490:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b4a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b4b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b4c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b4e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b4f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b500:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b510:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b520:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b530:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b540:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b550:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b560:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b570:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b580:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b590:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b5a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b5b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b5c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b5d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b5e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b5f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b600:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b610:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b620:·4254·552d·3230·2d30·3130·3435·300a·2020··BTU-20-010450.·· | |||
| 0003b630:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b640:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b650:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b660:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b670:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b680:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b690:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b6a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b6b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b6c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b6d0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| Max diff block lines reached; 608789/626645 bytes (97.15%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 126 | ············_\x8c_\x8i_\x8s············1.4.1 | 126 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 1007, 14 lines modified | Offset 1007, 19 lines modified | ||
| 1007 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1007 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1008 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1008 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1009 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1009 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1010 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1010 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1011 | ············_\x8c_\x8i_\x8s·····1.3.1 | 1011 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 1012 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1012 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1013 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1013 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1015 | [[packages]] | ||
| 1016 | name·=·"sudo" | ||
| 1017 | version·=·"*" | ||
| 1014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1015 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1019 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1016 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1020 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1017 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1021 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1018 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1022 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1019 | #·Remediation·is·applicable·only·in·certain·platforms | 1023 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1020 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1024 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1039, 19 lines modified | Offset 1044, 14 lines modified | ||
| 1039 | ··-·PCI-DSSv4-2.2.6 | 1044 | ··-·PCI-DSSv4-2.2.6 |
| 1040 | ··-·enable_strategy | 1045 | ··-·enable_strategy |
| 1041 | ··-·low_complexity | 1046 | ··-·low_complexity |
| 1042 | ··-·low_disruption | 1047 | ··-·low_disruption |
| 1043 | ··-·medium_severity | 1048 | ··-·medium_severity |
| 1044 | ··-·no_reboot_needed | 1049 | ··-·no_reboot_needed |
| 1045 | ··-·package_sudo_installed | 1050 | ··-·package_sudo_installed |
| 1046 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1047 | [[packages]] | ||
| 1048 | name·=·"sudo" | ||
| 1049 | version·=·"*" | ||
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1051 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1052 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1053 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1054 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1055 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1055 | include·install_sudo | 1056 | include·install_sudo |
| Offset 3900, 14 lines modified | Offset 3900, 19 lines modified | ||
| 3900 | Severity: ··medium | 3900 | Severity: ··medium |
| 3901 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3901 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3902 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3902 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3903 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3903 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3904 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3904 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3905 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3905 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3906 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3906 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3908 | [[packages]] | ||
| 3909 | name·=·"libpam-pwquality" | ||
| 3910 | version·=·"*" | ||
| 3907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3911 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3912 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3913 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3914 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3915 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3912 | #·Remediation·is·applicable·only·in·certain·platforms | 3916 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3913 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 3917 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 3944, 19 lines modified | Offset 3949, 14 lines modified | ||
| 3944 | ··-·DISA-STIG-UBTU-20-010057 | 3949 | ··-·DISA-STIG-UBTU-20-010057 |
| 3945 | ··-·enable_strategy | 3950 | ··-·enable_strategy |
| 3946 | ··-·low_complexity | 3951 | ··-·low_complexity |
| 3947 | ··-·low_disruption | 3952 | ··-·low_disruption |
| 3948 | ··-·medium_severity | 3953 | ··-·medium_severity |
| 3949 | ··-·no_reboot_needed | 3954 | ··-·no_reboot_needed |
| 3950 | ··-·package_pam_pwquality_installed | 3955 | ··-·package_pam_pwquality_installed |
| 3951 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3952 | [[packages]] | ||
| 3953 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 45859/51313 bytes (89.37%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 20045, 126 lines modified | Offset 20045, 126 lines modified | ||
| 0004e4c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004e4c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004e4d0:·646d·3130·3830·3922·2074·6162·696e·6465··dm10809"·tabinde | 0004e4d0:·646d·3130·3830·3922·2074·6162·696e·6465··dm10809"·tabinde | ||
| 0004e4e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0004e4e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0004e4f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0004e4f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0004e500:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0004e500:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0004e510:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0004e510:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0004e520:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0004e520:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0004e530:·656d·6564·6961·7469·6f6e·20 | 0004e530:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0004e540:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0004e550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004e560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0004e570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0004e580:·7073·6522·2069·643d·2269·646d·3130·3830··pse"·id="idm1080 | |||
| 0004e540:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0004e550:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0004e560:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0004e570:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0004e580:·3038·3039·223e·3c74·6162·6c65·2063·6c61··0809"><table·cla | |||
| 0004e590:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0004e5a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0004e5b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0004e5c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0004e5d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0004e5e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004e5f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004e600:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0004e610:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004e620:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0004e630:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0004e640:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0004e650:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0004e660:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0004e | 0004e590:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | ||
| 0004e5a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0004e5b0:·203d·2022·7273·7973·6c6f·6722·0a76·6572···=·"rsyslog".ver | |||
| 0004e5c0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0004e5d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0004e5e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0004e5f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0004e600:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0004e610:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0004e620:·6d31·3038·3130·2220·7461·6269·6e64·6578··m10810"·tabindex | |||
| 0004e630:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0004e640:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0004e650:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0004e660:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0004e670:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0004e680:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0004e690:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0004e6a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0004e6b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0004e6c0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 0004e6d0:·3831·3022·3e3c·7461·626c·6520·636c·6173··810"><table·clas | |||
| 0004e6e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0004e6f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0004e700:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0004e710:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0004e720:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0004e730:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004e740:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0004e750:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0004e760:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004e770:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0004e780:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0004e790:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0004e7a0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0004e7b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0004e7c0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0004e7d0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0004e7e0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0004e7f0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0004e800:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0004e810:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0004e820:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0004e830:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0004e840:·5d3b·2074·6865·6e0a·0a44·4542·4941·4e5f··];·then..DEBIAN_ | |||
| 0004e850:·4652·4f4e·5445·4e44·3d6e·6f6e·696e·7465··FRONTEND=noninte | |||
| 0004e860:·7261·6374·6976·6520·6170·742d·6765·7420··ractive·apt-get· | |||
| 0004e870:·696e·7374·616c·6c20·2d79·2022·7273·7973··install·-y·"rsys | |||
| 0004e880:·6c6f·6722·0a0a·656c·7365·0a20·2020·2026··log"..else.····& | |||
| 0004e890:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0004e | 0004e8a0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0004e8b0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0004e8c0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0004e8d0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0004e8e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004e8f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0004e690:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0004e6a0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0004e6b0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0004e6c0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0004e6d0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0004e6e0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0004e6f0:·205d·3b20·7468·656e·0a0a·4445·4249·414e···];·then..DEBIAN | |||
| 0004e700:·5f46·524f·4e54·454e·443d·6e6f·6e69·6e74··_FRONTEND=nonint | |||
| 0004e710:·6572·6163·7469·7665·2061·7074·2d67·6574··eractive·apt-get | |||
| 0004e720:·2069·6e73·7461·6c6c·202d·7920·2272·7379···install·-y·"rsy | |||
| 0004e730:·736c·6f67·220a·0a65·6c73·650a·2020·2020··slog"..else.···· | |||
| 0004e740:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0004e750:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0004e760:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0004e770:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0004e780:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0004e790:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0004e7a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0004e7b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0004e7c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0004e7d0:·6172·6765·743d·2223·6964·6d31·3038·3130··arget="#idm10810 | |||
| 0004e7e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0004e7f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0004e800:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| Max diff block lines reached; 195218/212384 bytes (91.92%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1557, 14 lines modified | Offset 1557, 19 lines modified | ||
| 1557 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1557 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1558 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1558 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1562 | ···························SRG-OS-000480-GPOS-00227 | 1562 | ···························SRG-OS-000480-GPOS-00227 |
| 1563 | ············_\x8c_\x8i_\x8s············4.2.1.1 | 1563 | ············_\x8c_\x8i_\x8s············4.2.1.1 |
| 1564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1565 | [[packages]] | ||
| 1566 | name·=·"rsyslog" | ||
| 1567 | version·=·"*" | ||
| 1564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1569 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1570 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1571 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1572 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1569 | #·Remediation·is·applicable·only·in·certain·platforms | 1573 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1574 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1589, 19 lines modified | Offset 1594, 14 lines modified | ||
| 1589 | ··-·NIST-800-53-CM-6(a) | 1594 | ··-·NIST-800-53-CM-6(a) |
| 1590 | ··-·enable_strategy | 1595 | ··-·enable_strategy |
| 1591 | ··-·low_complexity | 1596 | ··-·low_complexity |
| 1592 | ··-·low_disruption | 1597 | ··-·low_disruption |
| 1593 | ··-·medium_severity | 1598 | ··-·medium_severity |
| 1594 | ··-·no_reboot_needed | 1599 | ··-·no_reboot_needed |
| 1595 | ··-·package_rsyslog_installed | 1600 | ··-·package_rsyslog_installed |
| 1596 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1597 | [[packages]] | ||
| 1598 | name·=·"rsyslog" | ||
| 1599 | version·=·"*" | ||
| 1600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1601 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1602 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1603 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1604 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1605 | include·install_rsyslog | 1606 | include·install_rsyslog |
| Offset 1634, 14 lines modified | Offset 1634, 18 lines modified | ||
| 1634 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1634 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1635 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1635 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1636 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1636 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1638 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010432 | 1638 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010432 |
| 1639 | ············_\x8c_\x8i_\x8s············4.2.1.2 | 1639 | ············_\x8c_\x8i_\x8s············4.2.1.2 |
| 1640 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238353r654234_rule | 1640 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238353r654234_rule |
| 1641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1642 | [customizations.services] | ||
| 1643 | enabled·=·["rsyslog"] | ||
| 1641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1646 | #·Remediation·is·applicable·only·in·certain·platforms | 1649 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1647 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1650 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1682, 18 lines modified | Offset 1686, 14 lines modified | ||
| 1682 | ··-·NIST-800-53-CM-6(a) | 1686 | ··-·NIST-800-53-CM-6(a) |
| 1683 | ··-·enable_strategy | 1687 | ··-·enable_strategy |
| 1684 | ··-·low_complexity | 1688 | ··-·low_complexity |
| 1685 | ··-·low_disruption | 1689 | ··-·low_disruption |
| 1686 | ··-·medium_severity | 1690 | ··-·medium_severity |
| 1687 | ··-·no_reboot_needed | 1691 | ··-·no_reboot_needed |
| 1688 | ··-·service_rsyslog_enabled | 1692 | ··-·service_rsyslog_enabled |
| 1689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1690 | [customizations.services] | ||
| 1691 | enabled·=·["rsyslog"] | ||
| 1692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1693 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1694 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1695 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1695 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1696 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1696 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1697 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1697 | include·enable_rsyslog | 1698 | include·enable_rsyslog |
| Offset 3385, 14 lines modified | Offset 3385, 18 lines modified | ||
| 3385 | apport·service·can·be·disabled·with·the·following·command: | 3385 | apport·service·can·be·disabled·with·the·following·command: |
| 3386 | $·sudo·systemctl·mask·--now·apport.service | 3386 | $·sudo·systemctl·mask·--now·apport.service |
| 3387 | ···········The·Apport·service·modifies·the·kernel·fs.suid_dumpable·configuration | 3387 | ···········The·Apport·service·modifies·the·kernel·fs.suid_dumpable·configuration |
| 3388 | Rationale:·at·runtime·which·prevents·other·hardening·from·being·persistent. | 3388 | Rationale:·at·runtime·which·prevents·other·hardening·from·being·persistent. |
| 3389 | ···········Disabling·the·service·prevents·this·behavior. | 3389 | ···········Disabling·the·service·prevents·this·behavior. |
| 3390 | Severity: ·unknown | 3390 | Severity: ·unknown |
| 3391 | Rule·ID:···xccdf_org.ssgproject.content_rule_service_apport_disabled | 3391 | Rule·ID:···xccdf_org.ssgproject.content_rule_service_apport_disabled |
| 3392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3393 | [customizations.services] | ||
| 3394 | masked·=·["apport"] | ||
| 3392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3398 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3399 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3397 | #·Remediation·is·applicable·only·in·certain·platforms | 3400 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3398 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'apport'·2>/dev/null·| | 3401 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'apport'·2>/dev/null·| |
| Offset 3411, 33 lines modified | Offset 3415, 14 lines modified | ||
| 3411 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 3415 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 3412 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 3416 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 3413 | "$SYSTEMCTL_EXEC"·reset-failed·'apport.service'·||·true | 3417 | "$SYSTEMCTL_EXEC"·reset-failed·'apport.service'·||·true |
| 3414 | else | 3418 | else |
| 3415 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3419 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3416 | fi | 3420 | fi |
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 3420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 3421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3422 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 3423 | kind:·MachineConfig | ||
| Max diff block lines reached; 11470/17673 bytes (64.90%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e00:·6f66·2032·3032·3 | 00037e00:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15073, 130 lines modified | Offset 15073, 130 lines modified | ||
| 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | ||
| 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ae70:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003ae80:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ae90:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aea0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aeb0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aec0:·646d·3237·3335·223e·3c70·7265·3e3c·636f··dm2735"><pre><co | |||
| 0003aed0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003aee0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003aef0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ae70:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003ae80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aea0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aeb0:·3d22·6964·6d32·3733·3522·3e3c·7461·626c··="idm2735"><tabl | |||
| 0003aec0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aed0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aee0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aef0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af00:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af20:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af30:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003af90:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003afa0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003afb0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003afc0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003afd0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003afe0:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003aff0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b000:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b010:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b020:·6572·656e·7620·5d3b·2074·6865·6e0a·0a44··erenv·];·then..D | |||
| 0003b030:·4542·4941·4e5f·4652·4f4e·5445·4e44·3d6e··EBIAN_FRONTEND=n | |||
| 0003b040:·6f6e·696e·7465·7261·6374·6976·6520·6170··oninteractive·ap | |||
| 0003b050:·742d·6765·7420·696e·7374·616c·6c20·2d79··t-get·install·-y | |||
| 0003b060:·2022·6169·6465·220a·0a65·6c73·650a·2020···"aide"..else.·· | |||
| 0003b070:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b080:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b090:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b0a0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b0b0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b0c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b0d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b0e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b0f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b100:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | |||
| 0003b110:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003b120:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b130:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b140:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b150:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b160:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b170:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b180:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b190:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1b0:·7073·6522·2069·643d·2269·646d·3237·3336··pse"·id="idm2736 | |||
| 0003b1c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b1d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b1e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b1f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b200:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b210:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b220:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b230:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b240:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b250:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b260:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b270:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b280:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b290:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b2a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b2c0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b2d0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b2e0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b2f0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b300:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b310:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b320:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b330:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b340:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b350:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b360:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b370:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b380:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b390:·5455·2d32·302d·3031·3034·3530·0a20·202d··TU-20-010450.··- | |||
| 0003b3a0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b3b0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b3c0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b3d0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b3e0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b3f0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b400:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b410:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b420:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b430:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b440:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b450:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| Max diff block lines reached; 343964/361682 bytes (95.10%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R11 | 42 | ··············Guide·(STIG)·V1R11 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 117 | ············_\x8c_\x8i_\x8s············1.4.1 | 117 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 131 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 149, 19 lines modified | Offset 154, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | include·install_aide | 166 | include·install_aide |
| Offset 7085, 14 lines modified | Offset 7085, 19 lines modified | ||
| 7085 | Severity: ··medium | 7085 | Severity: ··medium |
| 7086 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7086 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7087 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 7087 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 7088 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 7088 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 7089 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 7089 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 7090 | ············_\x8c_\x8i_\x8s·····5.3.1 | 7090 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 7091 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 7091 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 7092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7093 | [[packages]] | ||
| 7094 | name·=·"libpam-pwquality" | ||
| 7095 | version·=·"*" | ||
| 7092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7096 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7093 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7097 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7094 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7098 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7095 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7099 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7096 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7097 | #·Remediation·is·applicable·only·in·certain·platforms | 7101 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7098 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7102 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 7129, 19 lines modified | Offset 7134, 14 lines modified | ||
| 7129 | ··-·DISA-STIG-UBTU-20-010057 | 7134 | ··-·DISA-STIG-UBTU-20-010057 |
| 7130 | ··-·enable_strategy | 7135 | ··-·enable_strategy |
| 7131 | ··-·low_complexity | 7136 | ··-·low_complexity |
| 7132 | ··-·low_disruption | 7137 | ··-·low_disruption |
| 7133 | ··-·medium_severity | 7138 | ··-·medium_severity |
| 7134 | ··-·no_reboot_needed | 7139 | ··-·no_reboot_needed |
| 7135 | ··-·package_pam_pwquality_installed | 7140 | ··-·package_pam_pwquality_installed |
| 7136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7137 | [[packages]] | ||
| 7138 | name·=·"libpam-pwquality" | ||
| 7139 | version·=·"*" | ||
| 7140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7145 | include·install_libpam-pwquality | 7146 | include·install_libpam-pwquality |
| Offset 7500, 14 lines modified | Offset 7500, 19 lines modified | ||
| 7500 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. | 7500 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. |
| 7501 | Severity: ··medium | 7501 | Severity: ··medium |
| 7502 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed | 7502 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed |
| 7503 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 7503 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 7504 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 7504 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 7505 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010005 | 7505 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010005 |
| 7506 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238200r653775_rule | 7506 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238200r653775_rule |
| 7507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7508 | [[packages]] | ||
| 7509 | name·=·"vlock" | ||
| 7510 | version·=·"*" | ||
| 7507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7508 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7509 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7510 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7511 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7512 | #·Remediation·is·applicable·only·in·certain·platforms | 7516 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7513 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7517 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7531, 19 lines modified | Offset 7536, 14 lines modified | ||
| 7531 | ··-·DISA-STIG-UBTU-20-010005 | 7536 | ··-·DISA-STIG-UBTU-20-010005 |
| 7532 | ··-·enable_strategy | 7537 | ··-·enable_strategy |
| 7533 | ··-·low_complexity | 7538 | ··-·low_complexity |
| 7534 | ··-·low_disruption | 7539 | ··-·low_disruption |
| 7535 | ··-·medium_severity | 7540 | ··-·medium_severity |
| 7536 | ··-·no_reboot_needed | 7541 | ··-·no_reboot_needed |
| 7537 | ··-·vlock_installed | 7542 | ··-·vlock_installed |
| 7538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7539 | [[packages]] | ||
| 7540 | name·=·"vlock" | ||
| Max diff block lines reached; 26566/32122 bytes (82.70%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d30:·2d3 | 00037d30:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15108, 130 lines modified | Offset 15108, 130 lines modified | ||
| 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | ||
| 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b0a0:·6469·6174·696f·6e20·53 | 0003b0a0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b0b0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b0c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0f0:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b100:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b110:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b120:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b0b0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b0c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b0d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b0e0:·7073·6522·2069·643d·2269·646d·3239·3032··pse"·id="idm2902 | |||
| 0003b0f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b100:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b110:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b120:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b130:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b140:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b150:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b160:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b170:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b180:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b190:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b1a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b1b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b1c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b1d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b1e0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b1f0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b200:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b210:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b220:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b230:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b240:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b250:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b260:·7468·656e·0a0a·4445·4249·414e·5f46·524f··then..DEBIAN_FRO | |||
| 0003b270:·4e54·454e·443d·6e6f·6e69·6e74·6572·6163··NTEND=noninterac | |||
| 0003b280:·7469·7665·2061·7074·2d67·6574·2069·6e73··tive·apt-get·ins | |||
| 0003b290:·7461·6c6c·202d·7920·2261·6964·6522·0a0a··tall·-y·"aide".. | |||
| 0003b2a0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b2b0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b2c0:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b2d0:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b2e0:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b2f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b300:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b310:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b320:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b330:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b340:·2369·646d·3239·3033·2220·7461·6269·6e64··#idm2903"·tabind | |||
| 0003b350:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b360:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b370:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b380:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b390:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b3a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b3b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b3c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b3d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b3e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b3f0:·6964·6d32·3930·3322·3e3c·7461·626c·6520··idm2903"><table· | |||
| 0003b400:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b410:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b420:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b430:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b440:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b450:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b460:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b470:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b480:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b490:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b4a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b4b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b4c0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b4d0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b4e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b4f0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b500:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b510:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b520:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b530:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b540:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b550:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b560:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b570:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b580:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b590:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b5a0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b5b0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b5c0:·5354·4947·2d55·4254·552d·3232·2d36·3531··STIG-UBTU-22-651 | |||
| 0003b5d0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b5e0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b5f0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b600:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b610:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b620:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b630:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b640:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b650:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b660:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b670:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b680:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| Max diff block lines reached; 528012/545868 bytes (96.73%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 1779, 14 lines modified | Offset 1779, 19 lines modified | ||
| 1779 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1779 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1780 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1780 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1781 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1781 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1782 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1782 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1783 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1783 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1784 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1784 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1785 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1785 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1786 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1787 | [[packages]] | ||
| 1788 | name·=·"sudo" | ||
| 1789 | version·=·"*" | ||
| 1786 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1790 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1787 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1791 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1788 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1792 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1789 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1793 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1790 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1794 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1791 | #·Remediation·is·applicable·only·in·certain·platforms | 1795 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1792 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1796 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1811, 19 lines modified | Offset 1816, 14 lines modified | ||
| 1811 | ··-·PCI-DSSv4-2.2.6 | 1816 | ··-·PCI-DSSv4-2.2.6 |
| 1812 | ··-·enable_strategy | 1817 | ··-·enable_strategy |
| 1813 | ··-·low_complexity | 1818 | ··-·low_complexity |
| 1814 | ··-·low_disruption | 1819 | ··-·low_disruption |
| 1815 | ··-·medium_severity | 1820 | ··-·medium_severity |
| 1816 | ··-·no_reboot_needed | 1821 | ··-·no_reboot_needed |
| 1817 | ··-·package_sudo_installed | 1822 | ··-·package_sudo_installed |
| 1818 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1819 | [[packages]] | ||
| 1820 | name·=·"sudo" | ||
| 1821 | version·=·"*" | ||
| 1822 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1823 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1824 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1824 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1825 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1825 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1826 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1826 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1827 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1827 | include·install_sudo | 1828 | include·install_sudo |
| Offset 7107, 14 lines modified | Offset 7107, 19 lines modified | ||
| 7107 | ············attacks·on·the·system. | 7107 | ············attacks·on·the·system. |
| 7108 | Severity: ··medium | 7108 | Severity: ··medium |
| 7109 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7109 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7110 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7110 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7111 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7111 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7112 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7112 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7113 | ············_\x8c_\x8i_\x8s····5.4.1 | 7113 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7115 | [[packages]] | ||
| 7116 | name·=·"libpam-pwquality" | ||
| 7117 | version·=·"*" | ||
| 7114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7119 | #·Remediation·is·applicable·only·in·certain·platforms | 7123 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7120 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7124 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 7151, 19 lines modified | Offset 7156, 14 lines modified | ||
| 7151 | ··-·DISA-STIG-UBTU-22-215010 | 7156 | ··-·DISA-STIG-UBTU-22-215010 |
| 7152 | ··-·enable_strategy | 7157 | ··-·enable_strategy |
| 7153 | ··-·low_complexity | 7158 | ··-·low_complexity |
| 7154 | ··-·low_disruption | 7159 | ··-·low_disruption |
| 7155 | ··-·medium_severity | 7160 | ··-·medium_severity |
| 7156 | ··-·no_reboot_needed | 7161 | ··-·no_reboot_needed |
| 7157 | ··-·package_pam_pwquality_installed | 7162 | ··-·package_pam_pwquality_installed |
| 7158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7159 | [[packages]] | ||
| 7160 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 39034/44495 bytes (87.73%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d40:·3 | 00037d40:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15099, 130 lines modified | Offset 15099, 130 lines modified | ||
| 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b010:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b020:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b030:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b040:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b050:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b060:·6964·6d32·3930·3222·3e3c·7072·653e·3c63··idm2902"><pre><c | |||
| 0003b070:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b080:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b090:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b010:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b020:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b030:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b040:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b050:·643d·2269·646d·3239·3032·223e·3c74·6162··d="idm2902"><tab | |||
| 0003b060:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b070:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b080:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b090:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b0a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b0b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b100:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b120:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b130:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b140:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b150:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b160:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b170:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b180:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b190:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b1a0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b1b0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b1c0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b1d0:·4445·4249·414e·5f46·524f·4e54·454e·443d··DEBIAN_FRONTEND= | |||
| 0003b1e0:·6e6f·6e69·6e74·6572·6163·7469·7665·2061··noninteractive·a | |||
| 0003b1f0:·7074·2d67·6574·2069·6e73·7461·6c6c·202d··pt-get·install·- | |||
| 0003b200:·7920·2261·6964·6522·0a0a·656c·7365·0a20··y·"aide"..else.· | |||
| 0003b210:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b220:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b230:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b240:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b250:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b260:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b270:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b280:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b290:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b2a0:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | |||
| 0003b2b0:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003b2c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b2d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b2e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b2f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b300:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b310:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b320:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b330:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b340:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b350:·6170·7365·2220·6964·3d22·6964·6d32·3930··apse"·id="idm290 | |||
| 0003b360:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b370:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b380:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b390:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b3a0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b3b0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b3c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b3d0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b3e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b400:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b410:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b420:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b430:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b440:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b450:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b460:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b470:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b480:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b490:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b4a0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b4b0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b4c0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b4d0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b4e0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b4f0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b500:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b510:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b520:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b530:·4254·552d·3232·2d36·3531·3031·300a·2020··BTU-22-651010.·· | |||
| 0003b540:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b550:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b560:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b570:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b580:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b590:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b5a0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b5b0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b5c0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b5d0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b5e0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| Max diff block lines reached; 421970/439826 bytes (95.94%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 14 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 125 | ············_\x8c_\x8i_\x8s············1.3.1 | 125 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 134 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 156, 19 lines modified | Offset 161, 14 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 163 | ··-·low_complexity |
| 159 | ··-·low_disruption | 164 | ··-·low_disruption |
| 160 | ··-·medium_severity | 165 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 173 | include·install_aide |
| Offset 1512, 14 lines modified | Offset 1512, 19 lines modified | ||
| 1512 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1512 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1513 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1513 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1514 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1514 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1515 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1515 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1516 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1516 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1517 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1517 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1518 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1518 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1519 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1520 | [[packages]] | ||
| 1521 | name·=·"sudo" | ||
| 1522 | version·=·"*" | ||
| 1519 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1520 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1521 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1522 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1523 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1524 | #·Remediation·is·applicable·only·in·certain·platforms | 1528 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1525 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1529 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1544, 19 lines modified | Offset 1549, 14 lines modified | ||
| 1544 | ··-·PCI-DSSv4-2.2.6 | 1549 | ··-·PCI-DSSv4-2.2.6 |
| 1545 | ··-·enable_strategy | 1550 | ··-·enable_strategy |
| 1546 | ··-·low_complexity | 1551 | ··-·low_complexity |
| 1547 | ··-·low_disruption | 1552 | ··-·low_disruption |
| 1548 | ··-·medium_severity | 1553 | ··-·medium_severity |
| 1549 | ··-·no_reboot_needed | 1554 | ··-·no_reboot_needed |
| 1550 | ··-·package_sudo_installed | 1555 | ··-·package_sudo_installed |
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1552 | [[packages]] | ||
| 1553 | name·=·"sudo" | ||
| 1554 | version·=·"*" | ||
| 1555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1556 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1557 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1558 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1559 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1560 | include·install_sudo | 1561 | include·install_sudo |
| Offset 6840, 14 lines modified | Offset 6840, 19 lines modified | ||
| 6840 | ············attacks·on·the·system. | 6840 | ············attacks·on·the·system. |
| 6841 | Severity: ··medium | 6841 | Severity: ··medium |
| 6842 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 6842 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 6843 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 6843 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 6844 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 6844 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 6845 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 6845 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 6846 | ············_\x8c_\x8i_\x8s····5.4.1 | 6846 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 6847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6848 | [[packages]] | ||
| 6849 | name·=·"libpam-pwquality" | ||
| 6850 | version·=·"*" | ||
| 6847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 6851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 6848 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6852 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6849 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6853 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6850 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6854 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6851 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 6855 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 6852 | #·Remediation·is·applicable·only·in·certain·platforms | 6856 | #·Remediation·is·applicable·only·in·certain·platforms |
| 6853 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 6857 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 6884, 19 lines modified | Offset 6889, 14 lines modified | ||
| 6884 | ··-·DISA-STIG-UBTU-22-215010 | 6889 | ··-·DISA-STIG-UBTU-22-215010 |
| 6885 | ··-·enable_strategy | 6890 | ··-·enable_strategy |
| 6886 | ··-·low_complexity | 6891 | ··-·low_complexity |
| 6887 | ··-·low_disruption | 6892 | ··-·low_disruption |
| 6888 | ··-·medium_severity | 6893 | ··-·medium_severity |
| 6889 | ··-·no_reboot_needed | 6894 | ··-·no_reboot_needed |
| 6890 | ··-·package_pam_pwquality_installed | 6895 | ··-·package_pam_pwquality_installed |
| 6891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6892 | [[packages]] | ||
| 6893 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 30831/36302 bytes (84.93%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d30:·2d3 | 00037d30:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15116, 130 lines modified | Offset 15116, 130 lines modified | ||
| 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b120:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b130:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b140:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b150:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b160:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b170:·6964·6d32·3930·3222·3e3c·7072·653e·3c63··idm2902"><pre><c | |||
| 0003b180:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b190:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b1a0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b120:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b130:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b140:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b150:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b160:·643d·2269·646d·3239·3032·223e·3c74·6162··d="idm2902"><tab | |||
| 0003b170:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b180:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b190:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b1a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b1b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b1c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b1d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b1e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b1f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b200:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b210:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b220:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b230:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b240:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b250:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b260:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b270:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b280:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b290:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b2a0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b2b0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b2c0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b2d0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b2e0:·4445·4249·414e·5f46·524f·4e54·454e·443d··DEBIAN_FRONTEND= | |||
| 0003b2f0:·6e6f·6e69·6e74·6572·6163·7469·7665·2061··noninteractive·a | |||
| 0003b300:·7074·2d67·6574·2069·6e73·7461·6c6c·202d··pt-get·install·- | |||
| 0003b310:·7920·2261·6964·6522·0a0a·656c·7365·0a20··y·"aide"..else.· | |||
| 0003b320:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b330:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b340:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b350:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b360:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b370:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b380:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b390:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b3a0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b3b0:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | |||
| 0003b3c0:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003b3d0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b3e0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b3f0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b400:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b410:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b420:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b430:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b440:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b450:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b460:·6170·7365·2220·6964·3d22·6964·6d32·3930··apse"·id="idm290 | |||
| 0003b470:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b480:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b490:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b4a0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b4b0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b4c0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b4d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b4e0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b4f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b500:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b510:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b520:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b530:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b540:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b550:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b560:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b570:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b580:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b590:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b5a0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b5b0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b5c0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b5d0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b5e0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b5f0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b600:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b610:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b620:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b630:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b640:·4254·552d·3232·2d36·3531·3031·300a·2020··BTU-22-651010.·· | |||
| 0003b650:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b660:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b670:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b680:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b690:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b6a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b6b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b6c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b6d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b6e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b6f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| Max diff block lines reached; 603687/621543 bytes (97.13%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 14 lines modified | Offset 124, 19 lines modified | ||
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 128 | ············_\x8c_\x8i_\x8s············1.3.1 | 128 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | 140 | #·Remediation·is·applicable·only·in·certain·platforms |
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 159, 19 lines modified | Offset 164, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 166 | ··-·low_complexity |
| 162 | ··-·low_disruption | 167 | ··-·low_disruption |
| 163 | ··-·medium_severity | 168 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | 176 | include·install_aide |
| Offset 1961, 14 lines modified | Offset 1961, 19 lines modified | ||
| 1961 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1961 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1962 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1962 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1963 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1963 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1964 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1964 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1965 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1965 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1966 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1966 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1967 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1967 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1968 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1969 | [[packages]] | ||
| 1970 | name·=·"sudo" | ||
| 1971 | version·=·"*" | ||
| 1968 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1972 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1969 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1973 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1970 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1974 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1971 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1975 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1972 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1976 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1973 | #·Remediation·is·applicable·only·in·certain·platforms | 1977 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1974 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1978 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1993, 19 lines modified | Offset 1998, 14 lines modified | ||
| 1993 | ··-·PCI-DSSv4-2.2.6 | 1998 | ··-·PCI-DSSv4-2.2.6 |
| 1994 | ··-·enable_strategy | 1999 | ··-·enable_strategy |
| 1995 | ··-·low_complexity | 2000 | ··-·low_complexity |
| 1996 | ··-·low_disruption | 2001 | ··-·low_disruption |
| 1997 | ··-·medium_severity | 2002 | ··-·medium_severity |
| 1998 | ··-·no_reboot_needed | 2003 | ··-·no_reboot_needed |
| 1999 | ··-·package_sudo_installed | 2004 | ··-·package_sudo_installed |
| 2000 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2001 | [[packages]] | ||
| 2002 | name·=·"sudo" | ||
| 2003 | version·=·"*" | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2005 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2006 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2007 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2008 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2009 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2009 | include·install_sudo | 2010 | include·install_sudo |
| Offset 7430, 14 lines modified | Offset 7430, 19 lines modified | ||
| 7430 | ············attacks·on·the·system. | 7430 | ············attacks·on·the·system. |
| 7431 | Severity: ··medium | 7431 | Severity: ··medium |
| 7432 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7432 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7433 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7433 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7434 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7434 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7435 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7435 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7436 | ············_\x8c_\x8i_\x8s····5.4.1 | 7436 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7438 | [[packages]] | ||
| 7439 | name·=·"libpam-pwquality" | ||
| 7440 | version·=·"*" | ||
| 7437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7442 | #·Remediation·is·applicable·only·in·certain·platforms | 7446 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7443 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7447 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 7474, 19 lines modified | Offset 7479, 14 lines modified | ||
| 7474 | ··-·DISA-STIG-UBTU-22-215010 | 7479 | ··-·DISA-STIG-UBTU-22-215010 |
| 7475 | ··-·enable_strategy | 7480 | ··-·enable_strategy |
| 7476 | ··-·low_complexity | 7481 | ··-·low_complexity |
| 7477 | ··-·low_disruption | 7482 | ··-·low_disruption |
| 7478 | ··-·medium_severity | 7483 | ··-·medium_severity |
| 7479 | ··-·no_reboot_needed | 7484 | ··-·no_reboot_needed |
| 7480 | ··-·package_pam_pwquality_installed | 7485 | ··-·package_pam_pwquality_installed |
| 7481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7482 | [[packages]] | ||
| 7483 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 46313/51774 bytes (89.45%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d40:·3 | 00037d40:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15111, 131 lines modified | Offset 15111, 131 lines modified | ||
| 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | ||
| 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b0e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b120:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b0e0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b0f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b100:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b110:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b120:·646d·3239·3032·223e·3c74·6162·6c65·2063··dm2902"><table·c | |||
| 0003b130:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b140:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b150:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b160:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b170:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b180:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b190:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b1a0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b1b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b1c0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b1d0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b1f0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b200:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b | 0003b130:·3930·3222·3e3c·7072·653e·3c63·6f64·653e··902"><pre><code> | ||
| 0003b140:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b150:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b160:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b220:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b230:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b240:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b250:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003b260:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003b270:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003b280:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003b290:·6e76·205d·3b20·7468·656e·0a0a·4445·4249··nv·];·then..DEBI | |||
| 0003b2a0:·414e·5f46·524f·4e54·454e·443d·6e6f·6e69··AN_FRONTEND=noni | |||
| 0003b2b0:·6e74·6572·6163·7469·7665·2061·7074·2d67··nteractive·apt-g | |||
| 0003b2c0:·6574·2069·6e73·7461·6c6c·202d·7920·2261··et·install·-y·"a | |||
| 0003b2d0:·6964·6522·0a0a·656c·7365·0a20·2020·2026··ide"..else.····& | |||
| 0003b2e0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b2f0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b300:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b310:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b320:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b330:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b340:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b350:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b360:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b370:·7267·6574·3d22·2369·646d·3239·3033·2220··rget="#idm2903"· | |||
| 0003b380:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b390:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b3a0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b3b0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b3c0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b3d0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b3e0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b3f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b400:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b410:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b420:·2220·6964·3d22·6964·6d32·3930·3322·3e3c··"·id="idm2903">< | |||
| 0003b430:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b440:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b450:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b460:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b470:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b480:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b490:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b4a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b4b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b4c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b4d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b4f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b500:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b510:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b520:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b530:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b540:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b550:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b560:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b570:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b580:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b590:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b5a0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b5b0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b5c0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b5d0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b5e0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b5f0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b600:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b610:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b620:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b630:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b640:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b650:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b660:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b670:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b680:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b690:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b6a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b6b0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| Max diff block lines reached; 603618/621612 bytes (97.11%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 1880, 14 lines modified | Offset 1880, 19 lines modified | ||
| 1880 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1880 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1881 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1881 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1882 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1882 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1883 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1883 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1884 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1884 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1885 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1885 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1886 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1886 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1888 | [[packages]] | ||
| 1889 | name·=·"sudo" | ||
| 1890 | version·=·"*" | ||
| 1887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1888 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1892 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1889 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1893 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1890 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1894 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1891 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1895 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1892 | #·Remediation·is·applicable·only·in·certain·platforms | 1896 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1893 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1897 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1912, 19 lines modified | Offset 1917, 14 lines modified | ||
| 1912 | ··-·PCI-DSSv4-2.2.6 | 1917 | ··-·PCI-DSSv4-2.2.6 |
| 1913 | ··-·enable_strategy | 1918 | ··-·enable_strategy |
| 1914 | ··-·low_complexity | 1919 | ··-·low_complexity |
| 1915 | ··-·low_disruption | 1920 | ··-·low_disruption |
| 1916 | ··-·medium_severity | 1921 | ··-·medium_severity |
| 1917 | ··-·no_reboot_needed | 1922 | ··-·no_reboot_needed |
| 1918 | ··-·package_sudo_installed | 1923 | ··-·package_sudo_installed |
| 1919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1920 | [[packages]] | ||
| 1921 | name·=·"sudo" | ||
| 1922 | version·=·"*" | ||
| 1923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1924 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1924 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1925 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1925 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1926 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1926 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1927 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1927 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1928 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1928 | include·install_sudo | 1929 | include·install_sudo |
| Offset 7349, 14 lines modified | Offset 7349, 19 lines modified | ||
| 7349 | ············attacks·on·the·system. | 7349 | ············attacks·on·the·system. |
| 7350 | Severity: ··medium | 7350 | Severity: ··medium |
| 7351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7352 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7352 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7353 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7353 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7354 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7354 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7355 | ············_\x8c_\x8i_\x8s····5.4.1 | 7355 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7357 | [[packages]] | ||
| 7358 | name·=·"libpam-pwquality" | ||
| 7359 | version·=·"*" | ||
| 7356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7361 | #·Remediation·is·applicable·only·in·certain·platforms | 7365 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7362 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7366 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 7393, 19 lines modified | Offset 7398, 14 lines modified | ||
| 7393 | ··-·DISA-STIG-UBTU-22-215010 | 7398 | ··-·DISA-STIG-UBTU-22-215010 |
| 7394 | ··-·enable_strategy | 7399 | ··-·enable_strategy |
| 7395 | ··-·low_complexity | 7400 | ··-·low_complexity |
| 7396 | ··-·low_disruption | 7401 | ··-·low_disruption |
| 7397 | ··-·medium_severity | 7402 | ··-·medium_severity |
| 7398 | ··-·no_reboot_needed | 7403 | ··-·no_reboot_needed |
| 7399 | ··-·package_pam_pwquality_installed | 7404 | ··-·package_pam_pwquality_installed |
| 7400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7401 | [[packages]] | ||
| 7402 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 46313/51784 bytes (89.43%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 20022, 126 lines modified | Offset 20022, 126 lines modified | ||
| 0004e350:·6172·6765·743d·2223·6964·6d31·3132·3736··arget="#idm11276 | 0004e350:·6172·6765·743d·2223·6964·6d31·3132·3736··arget="#idm11276 | ||
| 0004e360:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004e360:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004e370:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004e370:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004e380:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004e380:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004e390:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004e390:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004e3a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004e3a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004e3b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004e3b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004e3c0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0004e3d0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0004e3e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0004e3f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0004e400:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0004e410:·3d22·6964·6d31·3132·3736·223e·3c70·7265··="idm11276"><pre | |||
| 0004e420:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0004e430:·6573·5d5d·0a6e·616d·6520·3d20·2272·7379··es]].name·=·"rsy | |||
| 0004e440:·736c·6f67·220a·7665·7273·696f·6e20·3d20··slog".version·=· | |||
| 0004e450:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0004e3c0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0004e3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0004e3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0004e3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0004e400:·2069·643d·2269·646d·3131·3237·3622·3e3c···id="idm11276">< | |||
| 0004e410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0004e420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0004e430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0004e440:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0004e450:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0004e460:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0004e470:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004e480:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004e490:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004e4a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004e4b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0004e4c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004e4d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0004e4e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0004e4f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0004e500:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0004e510:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0004e520:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0004e530:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0004e540:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0004e550:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0004e560:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0004e570:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0004e580:·6e0a·0a44·4542·4941·4e5f·4652·4f4e·5445··n..DEBIAN_FRONTE | |||
| 0004e590:·4e44·3d6e·6f6e·696e·7465·7261·6374·6976··ND=noninteractiv | |||
| 0004e5a0:·6520·6170·742d·6765·7420·696e·7374·616c··e·apt-get·instal | |||
| 0004e5b0:·6c20·2d79·2022·7273·7973·6c6f·6722·0a0a··l·-y·"rsyslog".. | |||
| 0004e5c0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0004e5d0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0004e5e0:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0004e5f0:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0004e600:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0004e610:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0004e620:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0004e630:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0004e640:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0004e650:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0004e660:·2369·646d·3131·3237·3722·2074·6162·696e··#idm11277"·tabin | |||
| 0004e670:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0004e680:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0004e690:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0004e6a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0004e6b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0004e6c0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0004e6d0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0004e6e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004e6f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004e700:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004e710:·2269·646d·3131·3237·3722·3e3c·7461·626c··"idm11277"><tabl | |||
| 0004e720:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0004e730:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0004e740:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0004e750:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0004e760:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0004e770:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004e780:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0004e790:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004e7a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004e7b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0004e7c0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0004e7d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0004e7e0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0004e7f0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0004e800:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0004e810:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0004e820:·6520·7273·7973·6c6f·6720·6973·2069·6e73··e·rsyslog·is·ins | |||
| 0004e830:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0004e840:·3a0a·2020·2020·6e61·6d65·3a20·7273·7973··:.····name:·rsys | |||
| 0004e850:·6c6f·670a·2020·2020·7374·6174·653a·2070··log.····state:·p | |||
| 0004e860:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0004e870:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0004e880:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0004e890:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0004e8a0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0004e8b0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0004e8c0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0004e8d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0004e8e0:·3628·6129·0a20·202d·2065·6e61·626c·655f··6(a).··-·enable_ | |||
| 0004e8f0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0004e900:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0004e910:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0004e920:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0004e930:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0004e940:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0004e950:·6167·655f·7273·7973·6c6f·675f·696e·7374··age_rsyslog_inst | |||
| 0004e960:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0004e | 0004e460:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0004e | 0004e470:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0004e | 0004e480:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| Max diff block lines reached; 194942/212108 bytes (91.91%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1569, 14 lines modified | Offset 1569, 19 lines modified | ||
| 1569 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1569 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1570 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1570 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1571 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1571 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1572 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1572 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1574 | ···························SRG-OS-000480-GPOS-00227 | 1574 | ···························SRG-OS-000480-GPOS-00227 |
| 1575 | ············_\x8c_\x8i_\x8s············4.2.2.1 | 1575 | ············_\x8c_\x8i_\x8s············4.2.2.1 |
| 1576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1577 | [[packages]] | ||
| 1578 | name·=·"rsyslog" | ||
| 1579 | version·=·"*" | ||
| 1576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1581 | #·Remediation·is·applicable·only·in·certain·platforms | 1585 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1582 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1586 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1601, 19 lines modified | Offset 1606, 14 lines modified | ||
| 1601 | ··-·NIST-800-53-CM-6(a) | 1606 | ··-·NIST-800-53-CM-6(a) |
| 1602 | ··-·enable_strategy | 1607 | ··-·enable_strategy |
| 1603 | ··-·low_complexity | 1608 | ··-·low_complexity |
| 1604 | ··-·low_disruption | 1609 | ··-·low_disruption |
| 1605 | ··-·medium_severity | 1610 | ··-·medium_severity |
| 1606 | ··-·no_reboot_needed | 1611 | ··-·no_reboot_needed |
| 1607 | ··-·package_rsyslog_installed | 1612 | ··-·package_rsyslog_installed |
| 1608 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1609 | [[packages]] | ||
| 1610 | name·=·"rsyslog" | ||
| 1611 | version·=·"*" | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | include·install_rsyslog | 1618 | include·install_rsyslog |
| Offset 1645, 14 lines modified | Offset 1645, 18 lines modified | ||
| 1645 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1645 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1646 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1646 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1647 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1647 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1648 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1648 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1649 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1649 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1650 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-652010 | 1650 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-652010 |
| 1651 | ············_\x8c_\x8i_\x8s············4.2.2.2 | 1651 | ············_\x8c_\x8i_\x8s············4.2.2.2 |
| 1652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1653 | [customizations.services] | ||
| 1654 | enabled·=·["rsyslog"] | ||
| 1652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1653 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1656 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1654 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1657 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1655 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1658 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1656 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1659 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1657 | #·Remediation·is·applicable·only·in·certain·platforms | 1660 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1658 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1661 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1693, 18 lines modified | Offset 1697, 14 lines modified | ||
| 1693 | ··-·NIST-800-53-CM-6(a) | 1697 | ··-·NIST-800-53-CM-6(a) |
| 1694 | ··-·enable_strategy | 1698 | ··-·enable_strategy |
| 1695 | ··-·low_complexity | 1699 | ··-·low_complexity |
| 1696 | ··-·low_disruption | 1700 | ··-·low_disruption |
| 1697 | ··-·medium_severity | 1701 | ··-·medium_severity |
| 1698 | ··-·no_reboot_needed | 1702 | ··-·no_reboot_needed |
| 1699 | ··-·service_rsyslog_enabled | 1703 | ··-·service_rsyslog_enabled |
| 1700 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1701 | [customizations.services] | ||
| 1702 | enabled·=·["rsyslog"] | ||
| 1703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1704 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1704 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1705 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1705 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1706 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1706 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1707 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1707 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1708 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1708 | include·enable_rsyslog | 1709 | include·enable_rsyslog |
| Offset 3398, 14 lines modified | Offset 3398, 18 lines modified | ||
| 3398 | $·sudo·systemctl·mask·--now·apport.service | 3398 | $·sudo·systemctl·mask·--now·apport.service |
| 3399 | ············The·Apport·service·modifies·the·kernel·fs.suid_dumpable | 3399 | ············The·Apport·service·modifies·the·kernel·fs.suid_dumpable |
| 3400 | Rationale:··configuration·at·runtime·which·prevents·other·hardening·from·being | 3400 | Rationale:··configuration·at·runtime·which·prevents·other·hardening·from·being |
| 3401 | ············persistent.·Disabling·the·service·prevents·this·behavior. | 3401 | ············persistent.·Disabling·the·service·prevents·this·behavior. |
| 3402 | Severity: ··unknown | 3402 | Severity: ··unknown |
| 3403 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_apport_disabled | 3403 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_apport_disabled |
| 3404 | References:·_\x8c_\x8i_\x8s·1.5.3 | 3404 | References:·_\x8c_\x8i_\x8s·1.5.3 |
| 3405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3406 | [customizations.services] | ||
| 3407 | masked·=·["apport"] | ||
| 3405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3408 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3409 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3410 | #·Remediation·is·applicable·only·in·certain·platforms | 3413 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3411 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'apport'·2>/dev/null | 3414 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'apport'·2>/dev/null |
| Offset 3424, 33 lines modified | Offset 3428, 14 lines modified | ||
| 3424 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 3428 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 3425 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 3429 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 3426 | "$SYSTEMCTL_EXEC"·reset-failed·'apport.service'·||·true | 3430 | "$SYSTEMCTL_EXEC"·reset-failed·'apport.service'·||·true |
| 3427 | else | 3431 | else |
| 3428 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3432 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3429 | fi | 3433 | fi |
| 3430 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3431 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3432 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 3433 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 3434 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3435 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 3436 | kind:·MachineConfig | ||
| Max diff block lines reached; 11519/17734 bytes (64.95%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e00:·2032·3032·3 | 00037e00:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15065, 130 lines modified | Offset 15065, 130 lines modified | ||
| 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | ||
| 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003adf0:·656d·6564·6961·7469·6f6e·20 | 0003adf0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003ae00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ae10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae40:·7073·6522·2069·643d·2269·646d·3239·3032··pse"·id="idm2902 | |||
| 0003ae00:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003ae10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae30:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ae40:·3930·3222·3e3c·7461·626c·6520·636c·6173··902"><table·clas | |||
| 0003ae50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ae60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ae70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ae80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ae90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003aea0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003aeb0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003aec0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003aed0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aee0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003aef0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003af00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003af10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003af20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a | 0003ae50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003ae60:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ae70:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ae80:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003af40:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003af50:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003af60:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003af70:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003af80:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003af90:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003afa0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003afb0:·5d3b·2074·6865·6e0a·0a44·4542·4941·4e5f··];·then..DEBIAN_ | |||
| 0003afc0:·4652·4f4e·5445·4e44·3d6e·6f6e·696e·7465··FRONTEND=noninte | |||
| 0003afd0:·7261·6374·6976·6520·6170·742d·6765·7420··ractive·apt-get· | |||
| 0003afe0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003aff0:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003b000:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b010:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b020:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b030:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b040:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b050:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b060:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b070:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b080:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b090:·743d·2223·6964·6d32·3930·3322·2074·6162··t="#idm2903"·tab | |||
| 0003b0a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b0b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b0c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b0d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b0e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b0f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b100:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b110:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b120:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b130:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b140:·643d·2269·646d·3239·3033·223e·3c74·6162··d="idm2903"><tab | |||
| 0003b150:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b160:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b170:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b180:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b190:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b1a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b1c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b1d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b1f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b200:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b210:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b220:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b230:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b240:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b250:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b260:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b270:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b280:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b290:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b2a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b2b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b2c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b2d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b2e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b2f0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b300:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b310:·5341·2d53·5449·472d·5542·5455·2d32·322d··SA-STIG-UBTU-22- | |||
| 0003b320:·3635·3130·3130·0a20·202d·204e·4953·542d··651010.··-·NIST- | |||
| 0003b330:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b340:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b350:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b360:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b370:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b380:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b390:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b3a0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b3b0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b3c0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b3d0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b3e0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| Max diff block lines reached; 343826/361544 bytes (95.10%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R1 | 42 | ··············Guide·(STIG)·V1R1 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 117 | ············_\x8c_\x8i_\x8s············1.3.1 | 117 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 148, 19 lines modified | Offset 153, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 155 | ··-·low_complexity |
| 151 | ··-·low_disruption | 156 | ··-·low_disruption |
| 152 | ··-·medium_severity | 157 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | include·install_aide | 165 | include·install_aide |
| Offset 7852, 14 lines modified | Offset 7852, 19 lines modified | ||
| 7852 | ············construction·configuration·and·has·the·ability·to·limit·brute-force·attacks·on·the·system. | 7852 | ············construction·configuration·and·has·the·ability·to·limit·brute-force·attacks·on·the·system. |
| 7853 | Severity: ··medium | 7853 | Severity: ··medium |
| 7854 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7854 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7855 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7855 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7856 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7856 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7857 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7857 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7858 | ············_\x8c_\x8i_\x8s····5.4.1 | 7858 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7860 | [[packages]] | ||
| 7861 | name·=·"libpam-pwquality" | ||
| 7862 | version·=·"*" | ||
| 7859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7864 | #·Remediation·is·applicable·only·in·certain·platforms | 7868 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7865 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7869 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 7896, 19 lines modified | Offset 7901, 14 lines modified | ||
| 7896 | ··-·DISA-STIG-UBTU-22-215010 | 7901 | ··-·DISA-STIG-UBTU-22-215010 |
| 7897 | ··-·enable_strategy | 7902 | ··-·enable_strategy |
| 7898 | ··-·low_complexity | 7903 | ··-·low_complexity |
| 7899 | ··-·low_disruption | 7904 | ··-·low_disruption |
| 7900 | ··-·medium_severity | 7905 | ··-·medium_severity |
| 7901 | ··-·no_reboot_needed | 7906 | ··-·no_reboot_needed |
| 7902 | ··-·package_pam_pwquality_installed | 7907 | ··-·package_pam_pwquality_installed |
| 7903 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7904 | [[packages]] | ||
| 7905 | name·=·"libpam-pwquality" | ||
| 7906 | version·=·"*" | ||
| 7907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7908 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7909 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7910 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7911 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7912 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7912 | include·install_libpam-pwquality | 7913 | include·install_libpam-pwquality |
| Offset 8265, 14 lines modified | Offset 8265, 19 lines modified | ||
| 8265 | ············implemented,·once·invoked,·the·session·lock·must·remain·in·place·until·the·user | 8265 | ············implemented,·once·invoked,·the·session·lock·must·remain·in·place·until·the·user |
| 8266 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. | 8266 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. |
| 8267 | Severity: ··medium | 8267 | Severity: ··medium |
| 8268 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed | 8268 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed |
| 8269 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000056,·CCI-000058,·CCI-000060 | 8269 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000056,·CCI-000058,·CCI-000060 |
| 8270 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 8270 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 8271 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-412025 | 8271 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-412025 |
| 8272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8273 | [[packages]] | ||
| 8274 | name·=·"vlock" | ||
| 8275 | version·=·"*" | ||
| 8272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8277 | #·Remediation·is·applicable·only·in·certain·platforms | 8281 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8278 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 8282 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8296, 19 lines modified | Offset 8301, 14 lines modified | ||
| 8296 | ··-·DISA-STIG-UBTU-22-412025 | 8301 | ··-·DISA-STIG-UBTU-22-412025 |
| 8297 | ··-·enable_strategy | 8302 | ··-·enable_strategy |
| 8298 | ··-·low_complexity | 8303 | ··-·low_complexity |
| 8299 | ··-·low_disruption | 8304 | ··-·low_disruption |
| 8300 | ··-·medium_severity | 8305 | ··-·medium_severity |
| 8301 | ··-·no_reboot_needed | 8306 | ··-·no_reboot_needed |
| 8302 | ··-·vlock_installed | 8307 | ··-·vlock_installed |
| 8303 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8304 | [[packages]] | ||
| 8305 | name·=·"vlock" | ||
| Max diff block lines reached; 26896/32569 bytes (82.58%) of diff not shown. | |||
| Offset 3, 2329 lines modified | Offset 3, 2329 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_legacy_ptys_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disable·legacy·(BSD)·PTY·support</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_legacy_ptys_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_binary_dirs_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify· | 17 | ······<ocil:title>Verify·that·System·Executables·Have·Restrictive·Permissions</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_ | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_on_oops_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-grub2_disable_recovery_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Recovery·Booting</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-grub2_disable_recovery_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·/var/log·Located·On·Separate·Partition</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_minimum_age_login_defs_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Set·Password·Minimum·Age</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_minimum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_vdso_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Disable·the·32-bit·vDSO</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_vdso_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_audit_configuration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Audit·Configuration·Files· | 47 | ······<ocil:title>Audit·Configuration·Files·Permissions·are·640·or·More·Restrictive</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-file_ | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·that·System·Executable·Directories·Have·Restrictive·Permissions</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record· | 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_explicit_command_args_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Explicit·arguments·in·sudo·specifications</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sudoers_explicit_command_args_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ipv6_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Disable·the·IPv6·protocol</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ipv6_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-audit | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_media_export_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-ss | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_panic_on_oops_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Kernel·panic·on·oops</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-ss | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_panic_on_oops_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-account | 88 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_name_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·Names</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-account | 91 | ········<ocil:test_action_ref>ocil:ssg-account_unique_name_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·unlinkat</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_unlinkat_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_passwd_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-set_ip6tables_default_rule_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Set·Default·ip6tables·Policy·for·Incoming·Packets</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-set_ip6tables_default_rule_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Disable·hibernation</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_panic_on_oops_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-package_MFEhiplsm_installed_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Install·the·Host·Intrusion·Prevention·System·(HIPS)·Module</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-package_MFEhiplsm_installed_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Enable· | 119 | ······<ocil:title>Enable·PAM</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 121 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| Max diff block lines reached; 664657/677148 bytes (98.16%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 53 lines modified | Offset 72, 39 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_systemd"> | 84 | ····<cpe-lang:platform·id="package_systemd"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 99 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 96 | ········</cpe-lang:logical-test> | ||
| 107 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_c | 99 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 115 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="x86_64_arch"> | 106 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| Offset 134, 95 lines modified | Offset 120, 109 lines modified | ||
| 134 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_rsh-server"> | 122 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | ||
| 145 | ····</cpe-lang:platform> | ||
| 146 | ····<cpe-lang:platform·id="machine"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | 127 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 155 | ········</cpe-lang:logical-test> | 131 | ········</cpe-lang:logical-test> |
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 157 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | 134 | ········</cpe-lang:logical-test> |
| 159 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="g | 137 | ····<cpe-lang:platform·id="package_pam"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 142 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 147 | ····<cpe-lang:platform·id="package_audit"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_ntp"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | ||
| 156 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 160 | ······</cpe-lang:logical-test> | ||
| 161 | ····</cpe-lang:platform> | ||
| 162 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| Max diff block lines reached; 76404/88002 bytes (86.82%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 53 lines modified | Offset 72, 39 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_systemd"> | 84 | ····<cpe-lang:platform·id="package_systemd"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 99 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 96 | ········</cpe-lang:logical-test> | ||
| 107 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_c | 99 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 115 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="x86_64_arch"> | 106 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| Offset 134, 119 lines modified | Offset 120, 133 lines modified | ||
| 134 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_rsh-server"> | 122 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | ||
| 145 | ····</cpe-lang:platform> | ||
| 146 | ····<cpe-lang:platform·id="machine"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | 127 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 155 | ········</cpe-lang:logical-test> | 131 | ········</cpe-lang:logical-test> |
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 157 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | 134 | ········</cpe-lang:logical-test> |
| 159 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="g | 137 | ····<cpe-lang:platform·id="package_pam"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 142 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 147 | ····<cpe-lang:platform·id="package_audit"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_ntp"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 183 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="package_gdm"> |
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 186 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 187 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 188 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| Max diff block lines reached; 83395/95432 bytes (87.39%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_20-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_20-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·20.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·20.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·20.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·20.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 309 lines modified | Offset 72, 309 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="ip | 84 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg- | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_systemd"> | 90 | ····<cpe-lang:platform·id="package_systemd"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="uefi"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | ||
| 108 | ····</cpe-lang:platform> | ||
| 109 | ····<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> | ||
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | ||
| 120 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="not_s | 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 129 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="machine_and_package_ava | 110 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_a | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | ||
| 136 | ····</cpe-lang:platform> | ||
| 137 | ····<cpe-lang:platform·id="package_ufw"> | ||
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 140 | ······</cpe-lang:logical-test> | ||
| 141 | ····</cpe-lang:platform> | ||
| 142 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 143 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="x86_64_arch"> | 117 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 159 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 122 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 163 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | 129 | ········</cpe-lang:logical-test> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 137 | ······</cpe-lang:logical-test> | ||
| 138 | ····</cpe-lang:platform> | ||
| 139 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 142 | ······</cpe-lang:logical-test> | ||
| 143 | ····</cpe-lang:platform> | ||
| 170 | ····<cpe-lang:platform·id="package_rsh-server"> | 144 | ····<cpe-lang:platform·id="package_rsh-server"> |
| Max diff block lines reached; 159845/171778 bytes (93.05%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_22-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_22-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·22.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·22.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·22.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·22.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 327 lines modified | Offset 72, 327 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 99 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="machine_and_ | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 114 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 119 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="machine_and_mount_var"> | 96 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id=" | 102 | ····<cpe-lang:platform·id="package_systemd"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 131 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id=" | 107 | ····<cpe-lang:platform·id="uefi"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 136 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="not_s | 112 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 119 | ········</cpe-lang:logical-test> | ||
| 141 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="machine_and_package_ava | 122 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_a | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | ||
| 148 | ····</cpe-lang:platform> | ||
| 149 | ····<cpe-lang:platform·id="package_ufw"> | ||
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 152 | ······</cpe-lang:logical-test> | ||
| 153 | ····</cpe-lang:platform> | ||
| 154 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 155 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 158 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="x86_64_arch"> | 129 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 169 | ······</cpe-lang:logical-test> | ||
| 170 | ····</cpe-lang:platform> | ||
| 171 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 134 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 174 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 175 | ········</cpe-lang:logical-test> | 138 | ········</cpe-lang:logical-test> |
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 178 | ········</cpe-lang:logical-test> | 141 | ········</cpe-lang:logical-test> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| Max diff block lines reached; 162641/176593 bytes (92.10%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····19 | 2 | -rw-r--r--···0········0········0·····1976·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··12299 | 3 | -rw-r--r--···0········0········0··1229956·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 20540, 126 lines modified | Offset 20540, 126 lines modified | ||
| 000503b0:·7461·7267·6574·3d22·2369·646d·3533·3531··target="#idm5351 | 000503b0:·7461·7267·6574·3d22·2369·646d·3533·3531··target="#idm5351 | ||
| 000503c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000503c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000503d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000503d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000503e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000503e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000503f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000503f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00050400:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00050400:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00050410:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00050410:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00050420:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 00050430:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00050440:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00050450:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00050460:·2069·643d·2269·646d·3533·3531·223e·3c74···id="idm5351"><t | |||
| 00050470:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00050480:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00050490:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 000504a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000504b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000504c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000504d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000504e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000504f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00050500:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00050510:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00050520:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00050530:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00050540:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00050550:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00050560:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 00050570:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 00050580:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 00050590:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 000505a0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 000505b0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 000505c0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 000505d0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 000505e0:·0a0a·4445·4249·414e·5f46·524f·4e54·454e··..DEBIAN_FRONTEN | |||
| 000505f0:·443d·6e6f·6e69·6e74·6572·6163·7469·7665··D=noninteractive | |||
| 00050600:·2061·7074·2d67·6574·2069·6e73·7461·6c6c···apt-get·install | |||
| 00050610:·202d·7920·2273·7973·6c6f·672d·6e67·220a···-y·"syslog-ng". | |||
| 00050620:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 00050630:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 00050640:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 00050650:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 00050660:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 00050670:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00050680:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00050690:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 000506a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 000506b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 000506c0:·2223·6964·6d35·3335·3222·2074·6162·696e··"#idm5352"·tabin | |||
| 000506d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 000506e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 000506f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00050700:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00050710:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00050720:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 00050730:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00050740:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00050750:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00050760:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00050770:·2269·646d·3533·3532·223e·3c74·6162·6c65··"idm5352"><table | |||
| 00050780:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00050790:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000507a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000507b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 000507c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 000507d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000507e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000507f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00050800:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00050810:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00050820:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00050830:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00050840:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00050850:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00050860:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00050870:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 00050880:·2073·7973·6c6f·672d·6e67·2069·7320·696e···syslog-ng·is·in | |||
| 00050890:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 000508a0:·653a·0a20·2020·206e·616d·653a·2073·7973··e:.····name:·sys | |||
| 000508b0:·6c6f·672d·6e67·0a20·2020·2073·7461·7465··log-ng.····state | |||
| 000508c0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 000508d0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 000508e0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000508f0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00050900:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00050910:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00050920:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00050930:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00050940:·434d·2d36·2861·290a·2020·2d20·656e·6162··CM-6(a).··-·enab | |||
| 00050950:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 00050960:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00050970:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00050980:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00050990:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 000509a0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 000509b0:·6163·6b61·6765·5f73·7973·6c6f·676e·675f··ackage_syslogng_ | |||
| 000509c0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 000509d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000509e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 000509f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00050a00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00050a10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00050a20:·3533·3533·2220·7461·6269·6e64·6578·3d22··5353"·tabindex=" | |||
| 00050a30:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00050a40:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00050a50:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00050a60:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00050a70:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00050 | 00050420:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 00050 | 00050430:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| Max diff block lines reached; 58206/75372 bytes (77.22%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1715, 14 lines modified | Offset 1715, 19 lines modified | ||
| 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1717 | References:················4.4.2.4 | 1717 | References:················4.4.2.4 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1723 | [[packages]] | ||
| 1724 | name·=·"syslog-ng" | ||
| 1725 | version·=·"*" | ||
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1727 | #·Remediation·is·applicable·only·in·certain·platforms | 1731 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1728 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1732 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1747, 19 lines modified | Offset 1752, 14 lines modified | ||
| 1747 | ··-·NIST-800-53-CM-6(a) | 1752 | ··-·NIST-800-53-CM-6(a) |
| 1748 | ··-·enable_strategy | 1753 | ··-·enable_strategy |
| 1749 | ··-·low_complexity | 1754 | ··-·low_complexity |
| 1750 | ··-·low_disruption | 1755 | ··-·low_disruption |
| 1751 | ··-·medium_severity | 1756 | ··-·medium_severity |
| 1752 | ··-·no_reboot_needed | 1757 | ··-·no_reboot_needed |
| 1753 | ··-·package_syslogng_installed | 1758 | ··-·package_syslogng_installed |
| 1754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1755 | [[packages]] | ||
| 1756 | name·=·"syslog-ng" | ||
| 1757 | version·=·"*" | ||
| 1758 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1759 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1760 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1761 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1761 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1762 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1762 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1763 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1763 | include·install_syslog-ng | 1764 | include·install_syslog-ng |
| Offset 1787, 14 lines modified | Offset 1787, 18 lines modified | ||
| 1787 | ···························4.4.2.2,·4.4.2.4 | 1787 | ···························4.4.2.2,·4.4.2.4 |
| 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1795 | [customizations.services] | ||
| 1796 | enabled·=·["syslog-ng"] | ||
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1799 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1802 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1800 | ··block: | 1803 | ··block: |
| Offset 1818, 18 lines modified | Offset 1822, 14 lines modified | ||
| 1818 | ··-·NIST-800-53-CM-6(a) | 1822 | ··-·NIST-800-53-CM-6(a) |
| 1819 | ··-·enable_strategy | 1823 | ··-·enable_strategy |
| 1820 | ··-·low_complexity | 1824 | ··-·low_complexity |
| 1821 | ··-·low_disruption | 1825 | ··-·low_disruption |
| 1822 | ··-·medium_severity | 1826 | ··-·medium_severity |
| 1823 | ··-·no_reboot_needed | 1827 | ··-·no_reboot_needed |
| 1824 | ··-·service_syslogng_enabled | 1828 | ··-·service_syslogng_enabled |
| 1825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1826 | [customizations.services] | ||
| 1827 | enabled·=·["syslog-ng"] | ||
| 1828 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1829 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1830 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1830 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1831 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1831 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1832 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1832 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1833 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1833 | include·enable_syslog-ng | 1834 | include·enable_syslog-ng |
| Offset 1856, 14 lines modified | Offset 1856, 19 lines modified | ||
| 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1862 | ···························SRG-OS-000480-GPOS-00227 | 1862 | ···························SRG-OS-000480-GPOS-00227 |
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1864 | [[packages]] | ||
| 1865 | name·=·"rsyslog" | ||
| 1866 | version·=·"*" | ||
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1868 | #·Remediation·is·applicable·only·in·certain·platforms | 1872 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1869 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1873 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1888, 19 lines modified | Offset 1893, 14 lines modified | ||
| 1888 | ··-·NIST-800-53-CM-6(a) | 1893 | ··-·NIST-800-53-CM-6(a) |
| 1889 | ··-·enable_strategy | 1894 | ··-·enable_strategy |
| 1890 | ··-·low_complexity | 1895 | ··-·low_complexity |
| 1891 | ··-·low_disruption | 1896 | ··-·low_disruption |
| 1892 | ··-·medium_severity | 1897 | ··-·medium_severity |
| 1893 | ··-·no_reboot_needed | 1898 | ··-·no_reboot_needed |
| 1894 | ··-·package_rsyslog_installed | 1899 | ··-·package_rsyslog_installed |
| 1895 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1896 | [[packages]] | ||
| 1897 | name·=·"rsyslog" | ||
| 1898 | version·=·"*" | ||
| 1899 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1900 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 3425/9372 bytes (36.55%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d40:·3 | 00037d40:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 21115, 126 lines modified | Offset 21115, 126 lines modified | ||
| 000527a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000527a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000527b0:·2369·646d·3533·3531·2220·7461·6269·6e64··#idm5351"·tabind | 000527b0:·2369·646d·3533·3531·2220·7461·6269·6e64··#idm5351"·tabind | ||
| 000527c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 000527c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 000527d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 000527d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 000527e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 000527e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 000527f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 000527f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00052800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00052800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00052810:·5265·6d65·6469·6174·696f·6e20· | 00052810:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00052820:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 00052830:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00052840:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00052850:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00052860:·6170·7365·2220·6964·3d22·6964·6d35·3335··apse"·id="idm535 | |||
| 00052820:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00052830:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00052840:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00052850:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00052860:·3533·3531·223e·3c74·6162·6c65·2063·6c61··5351"><table·cla | |||
| 00052870:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00052880:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00052890:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000528a0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000528b0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000528c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000528d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 000528e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 000528f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00052900:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00052910:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00052920:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00052930:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00052940:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00052 | 00052870:·3122·3e3c·7072·653e·3c63·6f64·653e·0a5b··1"><pre><code>.[ | ||
| 00052880:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 00052890:·203d·2022·7379·736c·6f67·2d6e·6722·0a76···=·"syslog-ng".v | |||
| 000528a0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 000528b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 000528c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 000528d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 000528e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 000528f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00052900:·6964·6d35·3335·3222·2074·6162·696e·6465··idm5352"·tabinde | |||
| 00052910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00052920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00052930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00052940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00052950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00052960:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00052970:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00052980:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00052990:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 000529a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 000529b0:·3335·3222·3e3c·7461·626c·6520·636c·6173··352"><table·clas | |||
| 000529c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000529d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000529e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000529f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00052a00:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00052a10:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00052a20:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00052a30:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00052a40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00052a50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00052a60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00052a70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00052a80:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00052a90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00052aa0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 00052ab0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 00052ac0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 00052ad0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 00052ae0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 00052af0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 00052b00:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 00052b10:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 00052b20:·5d3b·2074·6865·6e0a·0a44·4542·4941·4e5f··];·then..DEBIAN_ | |||
| 00052b30:·4652·4f4e·5445·4e44·3d6e·6f6e·696e·7465··FRONTEND=noninte | |||
| 00052b40:·7261·6374·6976·6520·6170·742d·6765·7420··ractive·apt-get· | |||
| 00052b50:·696e·7374·616c·6c20·2d79·2022·7379·736c··install·-y·"sysl | |||
| 00052b60:·6f67·2d6e·6722·0a0a·656c·7365·0a20·2020··og-ng"..else.··· | |||
| 00052b70:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 00052 | 00052b80:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | ||
| 00052b90:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 00052ba0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 00052bb0:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 00052bc0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00052bd0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00052be0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00052bf0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00052c00:·7461·7267·6574·3d22·2369·646d·3533·3533··target="#idm5353 | |||
| 00052c10:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00052c20:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00052c30:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00052c40:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00052c50:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00052c60:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00052c70:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00052c80:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00052c90:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00052ca0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00052cb0:·7365·2220·6964·3d22·6964·6d35·3335·3322··se"·id="idm5353" | |||
| 00052cc0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00052cd0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00052970:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 00052980:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 00052990:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 000529a0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 000529b0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 000529c0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 000529d0:·205d·3b20·7468·656e·0a0a·4445·4249·414e···];·then..DEBIAN | |||
| Max diff block lines reached; 127318/144622 bytes (88.04%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1891, 14 lines modified | Offset 1891, 19 lines modified | ||
| 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1893 | References:················4.4.2.4 | 1893 | References:················4.4.2.4 |
| 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1899 | [[packages]] | ||
| 1900 | name·=·"syslog-ng" | ||
| 1901 | version·=·"*" | ||
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1903 | #·Remediation·is·applicable·only·in·certain·platforms | 1907 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1904 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1908 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1923, 19 lines modified | Offset 1928, 14 lines modified | ||
| 1923 | ··-·NIST-800-53-CM-6(a) | 1928 | ··-·NIST-800-53-CM-6(a) |
| 1924 | ··-·enable_strategy | 1929 | ··-·enable_strategy |
| 1925 | ··-·low_complexity | 1930 | ··-·low_complexity |
| 1926 | ··-·low_disruption | 1931 | ··-·low_disruption |
| 1927 | ··-·medium_severity | 1932 | ··-·medium_severity |
| 1928 | ··-·no_reboot_needed | 1933 | ··-·no_reboot_needed |
| 1929 | ··-·package_syslogng_installed | 1934 | ··-·package_syslogng_installed |
| 1930 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1931 | [[packages]] | ||
| 1932 | name·=·"syslog-ng" | ||
| 1933 | version·=·"*" | ||
| 1934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1935 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1935 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1936 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1936 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1937 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1937 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1938 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1938 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1939 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1939 | include·install_syslog-ng | 1940 | include·install_syslog-ng |
| Offset 1963, 14 lines modified | Offset 1963, 18 lines modified | ||
| 1963 | ···························4.4.2.2,·4.4.2.4 | 1963 | ···························4.4.2.2,·4.4.2.4 |
| 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1971 | [customizations.services] | ||
| 1972 | enabled·=·["syslog-ng"] | ||
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1971 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1974 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1972 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1975 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1973 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1976 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1974 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1977 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1975 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1978 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1976 | ··block: | 1979 | ··block: |
| Offset 1994, 18 lines modified | Offset 1998, 14 lines modified | ||
| 1994 | ··-·NIST-800-53-CM-6(a) | 1998 | ··-·NIST-800-53-CM-6(a) |
| 1995 | ··-·enable_strategy | 1999 | ··-·enable_strategy |
| 1996 | ··-·low_complexity | 2000 | ··-·low_complexity |
| 1997 | ··-·low_disruption | 2001 | ··-·low_disruption |
| 1998 | ··-·medium_severity | 2002 | ··-·medium_severity |
| 1999 | ··-·no_reboot_needed | 2003 | ··-·no_reboot_needed |
| 2000 | ··-·service_syslogng_enabled | 2004 | ··-·service_syslogng_enabled |
| 2001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2002 | [customizations.services] | ||
| 2003 | enabled·=·["syslog-ng"] | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2005 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2006 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2007 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2008 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2009 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2009 | include·enable_syslog-ng | 2010 | include·enable_syslog-ng |
| Offset 2032, 14 lines modified | Offset 2032, 19 lines modified | ||
| 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 2038 | ···························SRG-OS-000480-GPOS-00227 | 2038 | ···························SRG-OS-000480-GPOS-00227 |
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2040 | [[packages]] | ||
| 2041 | name·=·"rsyslog" | ||
| 2042 | version·=·"*" | ||
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2043 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2040 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2044 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2041 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2045 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2042 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2046 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2043 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2047 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2044 | #·Remediation·is·applicable·only·in·certain·platforms | 2048 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2045 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2049 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2064, 19 lines modified | Offset 2069, 14 lines modified | ||
| 2064 | ··-·NIST-800-53-CM-6(a) | 2069 | ··-·NIST-800-53-CM-6(a) |
| 2065 | ··-·enable_strategy | 2070 | ··-·enable_strategy |
| 2066 | ··-·low_complexity | 2071 | ··-·low_complexity |
| 2067 | ··-·low_disruption | 2072 | ··-·low_disruption |
| 2068 | ··-·medium_severity | 2073 | ··-·medium_severity |
| 2069 | ··-·no_reboot_needed | 2074 | ··-·no_reboot_needed |
| 2070 | ··-·package_rsyslog_installed | 2075 | ··-·package_rsyslog_installed |
| 2071 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2072 | [[packages]] | ||
| 2073 | name·=·"rsyslog" | ||
| 2074 | version·=·"*" | ||
| 2075 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2076 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9728/15680 bytes (62.04%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15651, 127 lines modified | Offset 15651, 127 lines modified | ||
| 0003d220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003d220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003d230:·743d·2223·6964·6d35·3335·3122·2074·6162··t="#idm5351"·tab | 0003d230:·743d·2223·6964·6d35·3335·3122·2074·6162··t="#idm5351"·tab | ||
| 0003d240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003d240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003d250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003d250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003d260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003d260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003d270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003d270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003d280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003d280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003d290:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003d290:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003d2a0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003d2a0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003d2b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003d2c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003d2d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003d2e0:·6964·6d35·3335·3122·3e3c·7461·626c·6520··idm5351"><table· | |||
| 0003d2f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003d300:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003d310:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003d320:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003d330:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003d340:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003d350:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003d360:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003d370:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003d380:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003d390:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003d3a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003d3b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003d3c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003d3d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003d3e0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003d3f0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003d400:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003d410:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003d420:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003d430:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003d440:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003d450:·656e·7620·5d3b·2074·6865·6e0a·0a44·4542··env·];·then..DEB | |||
| 0003d460:·4941·4e5f·4652·4f4e·5445·4e44·3d6e·6f6e··IAN_FRONTEND=non | |||
| 0003d470:·696e·7465·7261·6374·6976·6520·6170·742d··interactive·apt- | |||
| 0003d480:·6765·7420·696e·7374·616c·6c20·2d79·2022··get·install·-y·" | |||
| 0003d490:·7379·736c·6f67·2d6e·6722·0a0a·656c·7365··syslog-ng"..else | |||
| 0003d4a0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003d4b0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003d4c0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003d4d0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003d4e0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003d4f0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003d500:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003d510:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003d520:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003d530:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003d540:·3533·3532·2220·7461·6269·6e64·6578·3d22··5352"·tabindex=" | |||
| 0003d550:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003d560:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003d570:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003d580:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003d590:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003d5a0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003d | 0003d2b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003d2c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003d2d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003d2e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003d2f0:·3533·3531·223e·3c70·7265·3e3c·636f·6465··5351"><pre><code | |||
| 0003d300:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003d310:·616d·6520·3d20·2273·7973·6c6f·672d·6e67··ame·=·"syslog-ng | |||
| 0003d320:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003d330:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003d340:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003d350:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003d360:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003d5c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003d5d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003d5e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003d5f0:·3335·3222·3e3c·7461·626c·6520·636c·6173··352"><table·clas | |||
| 0003d600:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003d610:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003d620:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003d630:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003d640:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003d650:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003d660:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003d670:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003d680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d690:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003d6a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003d6b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003d6c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003d6d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003d6e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003d6f0:·616d·653a·2045·6e73·7572·6520·7379·736c··ame:·Ensure·sysl | |||
| 0003d700:·6f67·2d6e·6720·6973·2069·6e73·7461·6c6c··og-ng·is·install | |||
| 0003d710:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003d720:·2020·6e61·6d65·3a20·7379·736c·6f67·2d6e····name:·syslog-n | |||
| 0003d730:·670a·2020·2020·7374·6174·653a·2070·7265··g.····state:·pre | |||
| 0003d740:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003d750:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003d760:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003d770:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003d780:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003d790:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003d7a0:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0003d7b0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003d7c0:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0003d7d0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003d7e0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003d7f0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003d800:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003d810:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003d820:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003d830:·655f·7379·736c·6f67·6e67·5f69·6e73·7461··e_syslogng_insta | |||
| 0003d840:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| Max diff block lines reached; 41480/58784 bytes (70.56%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:11 | 40 | ····*·cpe:/o:debian:debian_linux:11 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 276, 14 lines modified | Offset 276, 19 lines modified | ||
| 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 278 | References:················4.4.2.4 | 278 | References:················4.4.2.4 |
| 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 284 | [[packages]] | ||
| 285 | name·=·"syslog-ng" | ||
| 286 | version·=·"*" | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 288 | #·Remediation·is·applicable·only·in·certain·platforms | 292 | #·Remediation·is·applicable·only·in·certain·platforms |
| 289 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 293 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 308, 19 lines modified | Offset 313, 14 lines modified | ||
| 308 | ··-·NIST-800-53-CM-6(a) | 313 | ··-·NIST-800-53-CM-6(a) |
| 309 | ··-·enable_strategy | 314 | ··-·enable_strategy |
| 310 | ··-·low_complexity | 315 | ··-·low_complexity |
| 311 | ··-·low_disruption | 316 | ··-·low_disruption |
| 312 | ··-·medium_severity | 317 | ··-·medium_severity |
| 313 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 314 | ··-·package_syslogng_installed | 319 | ··-·package_syslogng_installed |
| 315 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 316 | [[packages]] | ||
| 317 | name·=·"syslog-ng" | ||
| 318 | version·=·"*" | ||
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 324 | include·install_syslog-ng | 325 | include·install_syslog-ng |
| Offset 348, 14 lines modified | Offset 348, 18 lines modified | ||
| 348 | ···························4.4.2.2,·4.4.2.4 | 348 | ···························4.4.2.2,·4.4.2.4 |
| 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 356 | [customizations.services] | ||
| 357 | enabled·=·["syslog-ng"] | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 360 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 363 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 361 | ··block: | 364 | ··block: |
| Offset 379, 18 lines modified | Offset 383, 14 lines modified | ||
| 379 | ··-·NIST-800-53-CM-6(a) | 383 | ··-·NIST-800-53-CM-6(a) |
| 380 | ··-·enable_strategy | 384 | ··-·enable_strategy |
| 381 | ··-·low_complexity | 385 | ··-·low_complexity |
| 382 | ··-·low_disruption | 386 | ··-·low_disruption |
| 383 | ··-·medium_severity | 387 | ··-·medium_severity |
| 384 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 385 | ··-·service_syslogng_enabled | 389 | ··-·service_syslogng_enabled |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 387 | [customizations.services] | ||
| 388 | enabled·=·["syslog-ng"] | ||
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 394 | include·enable_syslog-ng | 395 | include·enable_syslog-ng |
| Offset 417, 14 lines modified | Offset 417, 19 lines modified | ||
| 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 423 | ···························SRG-OS-000480-GPOS-00227 | 423 | ···························SRG-OS-000480-GPOS-00227 |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 425 | [[packages]] | ||
| 426 | name·=·"rsyslog" | ||
| 427 | version·=·"*" | ||
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 425 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 426 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 427 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 428 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 429 | #·Remediation·is·applicable·only·in·certain·platforms | 433 | #·Remediation·is·applicable·only·in·certain·platforms |
| 430 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 434 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 449, 19 lines modified | Offset 454, 14 lines modified | ||
| 449 | ··-·NIST-800-53-CM-6(a) | 454 | ··-·NIST-800-53-CM-6(a) |
| 450 | ··-·enable_strategy | 455 | ··-·enable_strategy |
| 451 | ··-·low_complexity | 456 | ··-·low_complexity |
| 452 | ··-·low_disruption | 457 | ··-·low_disruption |
| 453 | ··-·medium_severity | 458 | ··-·medium_severity |
| 454 | ··-·no_reboot_needed | 459 | ··-·no_reboot_needed |
| 455 | ··-·package_rsyslog_installed | 460 | ··-·package_rsyslog_installed |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 457 | [[packages]] | ||
| 458 | name·=·"rsyslog" | ||
| 459 | version·=·"*" | ||
| 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1801/7721 bytes (23.33%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 20551, 126 lines modified | Offset 20551, 126 lines modified | ||
| 00050460:·6574·3d22·2369·646d·3533·3531·2220·7461··et="#idm5351"·ta | 00050460:·6574·3d22·2369·646d·3533·3531·2220·7461··et="#idm5351"·ta | ||
| 00050470:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00050470:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00050480:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00050480:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00050490:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00050490:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000504a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000504a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000504b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000504b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 000504c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000504c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000504d0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 000504e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000504f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00050500:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00050510:·2269·646d·3533·3531·223e·3c74·6162·6c65··"idm5351"><table | |||
| 00050520:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00050530:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00050540:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00050550:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00050560:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00050570:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00050580:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00050590:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000505a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000505b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000505c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 000505d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 000505e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 000505f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00050600:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00050610:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 00050620:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 00050630:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 00050640:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 00050650:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 00050660:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 00050670:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 00050680:·7265·6e76·205d·3b20·7468·656e·0a0a·4445··renv·];·then..DE | |||
| 00050690:·4249·414e·5f46·524f·4e54·454e·443d·6e6f··BIAN_FRONTEND=no | |||
| 000506a0:·6e69·6e74·6572·6163·7469·7665·2061·7074··ninteractive·apt | |||
| 000506b0:·2d67·6574·2069·6e73·7461·6c6c·202d·7920··-get·install·-y· | |||
| 000506c0:·2273·7973·6c6f·672d·6e67·220a·0a65·6c73··"syslog-ng"..els | |||
| 000506d0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 000506e0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 000506f0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 00050700:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 00050710:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 00050720:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00050730:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00050740:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00050750:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00050760:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00050770:·6d35·3335·3222·2074·6162·696e·6465·783d··m5352"·tabindex= | |||
| 00050780:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00050790:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 000507a0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 000507b0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 000507c0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 000507d0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 000507e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000507f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00050800:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00050810:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00050820:·3533·3532·223e·3c74·6162·6c65·2063·6c61··5352"><table·cla | |||
| 00050830:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00050840:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00050850:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00050860:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00050870:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00050880:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00050890:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 000508a0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 000508b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000508c0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 000508d0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 000508e0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 000508f0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00050900:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00050910:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00050920:·6e61·6d65·3a20·456e·7375·7265·2073·7973··name:·Ensure·sys | |||
| 00050930:·6c6f·672d·6e67·2069·7320·696e·7374·616c··log-ng·is·instal | |||
| 00050940:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00050950:·2020·206e·616d·653a·2073·7973·6c6f·672d·····name:·syslog- | |||
| 00050960:·6e67·0a20·2020·2073·7461·7465·3a20·7072··ng.····state:·pr | |||
| 00050970:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 00050980:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 00050990:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000509a0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000509b0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000509c0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000509d0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 000509e0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 000509f0:·2861·290a·2020·2d20·656e·6162·6c65·5f73··(a).··-·enable_s | |||
| 00050a00:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00050a10:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00050a20:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00050a30:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00050a40:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 00050a50:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 00050a60:·6765·5f73·7973·6c6f·676e·675f·696e·7374··ge_syslogng_inst | |||
| 00050a70:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00050a80:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00050a90:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00050aa0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00050ab0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00050ac0:·7461·7267·6574·3d22·2369·646d·3533·3533··target="#idm5353 | |||
| 00050ad0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00050ae0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00050af0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00050b00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00050b10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00050b20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00050 | 000504d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 00050 | 000504e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| Max diff block lines reached; 127456/144622 bytes (88.13%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1717, 14 lines modified | Offset 1717, 19 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1719 | References:················4.4.2.4 | 1719 | References:················4.4.2.4 |
| 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [[packages]] | ||
| 1726 | name·=·"syslog-ng" | ||
| 1727 | version·=·"*" | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1729 | #·Remediation·is·applicable·only·in·certain·platforms | 1733 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1730 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1734 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1749, 19 lines modified | Offset 1754, 14 lines modified | ||
| 1749 | ··-·NIST-800-53-CM-6(a) | 1754 | ··-·NIST-800-53-CM-6(a) |
| 1750 | ··-·enable_strategy | 1755 | ··-·enable_strategy |
| 1751 | ··-·low_complexity | 1756 | ··-·low_complexity |
| 1752 | ··-·low_disruption | 1757 | ··-·low_disruption |
| 1753 | ··-·medium_severity | 1758 | ··-·medium_severity |
| 1754 | ··-·no_reboot_needed | 1759 | ··-·no_reboot_needed |
| 1755 | ··-·package_syslogng_installed | 1760 | ··-·package_syslogng_installed |
| 1756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1757 | [[packages]] | ||
| 1758 | name·=·"syslog-ng" | ||
| 1759 | version·=·"*" | ||
| 1760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1761 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1762 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1763 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1764 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1765 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1765 | include·install_syslog-ng | 1766 | include·install_syslog-ng |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ···························4.4.2.2,·4.4.2.4 | 1789 | ···························4.4.2.2,·4.4.2.4 |
| 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations.services] | ||
| 1798 | enabled·=·["syslog-ng"] | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1801 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1804 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1802 | ··block: | 1805 | ··block: |
| Offset 1820, 18 lines modified | Offset 1824, 14 lines modified | ||
| 1820 | ··-·NIST-800-53-CM-6(a) | 1824 | ··-·NIST-800-53-CM-6(a) |
| 1821 | ··-·enable_strategy | 1825 | ··-·enable_strategy |
| 1822 | ··-·low_complexity | 1826 | ··-·low_complexity |
| 1823 | ··-·low_disruption | 1827 | ··-·low_disruption |
| 1824 | ··-·medium_severity | 1828 | ··-·medium_severity |
| 1825 | ··-·no_reboot_needed | 1829 | ··-·no_reboot_needed |
| 1826 | ··-·service_syslogng_enabled | 1830 | ··-·service_syslogng_enabled |
| 1827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1828 | [customizations.services] | ||
| 1829 | enabled·=·["syslog-ng"] | ||
| 1830 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1831 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1832 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1833 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1834 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1835 | include·enable_syslog-ng | 1836 | include·enable_syslog-ng |
| Offset 1858, 14 lines modified | Offset 1858, 19 lines modified | ||
| 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1864 | ···························SRG-OS-000480-GPOS-00227 | 1864 | ···························SRG-OS-000480-GPOS-00227 |
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1866 | [[packages]] | ||
| 1867 | name·=·"rsyslog" | ||
| 1868 | version·=·"*" | ||
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1871 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1872 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1873 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1870 | #·Remediation·is·applicable·only·in·certain·platforms | 1874 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1871 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1875 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1890, 19 lines modified | Offset 1895, 14 lines modified | ||
| 1890 | ··-·NIST-800-53-CM-6(a) | 1895 | ··-·NIST-800-53-CM-6(a) |
| 1891 | ··-·enable_strategy | 1896 | ··-·enable_strategy |
| 1892 | ··-·low_complexity | 1897 | ··-·low_complexity |
| 1893 | ··-·low_disruption | 1898 | ··-·low_disruption |
| 1894 | ··-·medium_severity | 1899 | ··-·medium_severity |
| 1895 | ··-·no_reboot_needed | 1900 | ··-·no_reboot_needed |
| 1896 | ··-·package_rsyslog_installed | 1901 | ··-·package_rsyslog_installed |
| 1897 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1898 | [[packages]] | ||
| 1899 | name·=·"rsyslog" | ||
| 1900 | version·=·"*" | ||
| 1901 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9728/15668 bytes (62.09%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 19680, 126 lines modified | Offset 19680, 126 lines modified | ||
| 0004cdf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0004cdf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0004ce00:·743d·2223·6964·6d34·3831·3222·2074·6162··t="#idm4812"·tab | 0004ce00:·743d·2223·6964·6d34·3831·3222·2074·6162··t="#idm4812"·tab | ||
| 0004ce10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0004ce10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0004ce20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0004ce20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0004ce30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0004ce30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0004ce40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0004ce40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0004ce50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0004ce50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0004ce60:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0004ce60:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0004ce70:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0004ce80:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004ce90:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004cea0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004ceb0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004ce70:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0004ce80:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004ce90:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004cea0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004ceb0:·6964·6d34·3831·3222·3e3c·7461·626c·6520··idm4812"><table· | |||
| 0004cec0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004ced0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0004cee0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0004cef0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004cf00:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004cf10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004cf20:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004cf30:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0004cf40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004cf50:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004cf60:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004cf70:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004cf80:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004cf90:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004c | 0004cec0:·3438·3132·223e·3c70·7265·3e3c·636f·6465··4812"><pre><code | ||
| 0004ced0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0004cee0:·616d·6520·3d20·2272·7379·736c·6f67·220a··ame·=·"rsyslog". | |||
| 0004cef0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0004cfb0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0004cfc0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0004cfd0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0004cfe0:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0004cff0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0004d000:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0004d010:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0004d020:·656e·7620·5d3b·2074·6865·6e0a·0a44·4542··env·];·then..DEB | |||
| 0004d030:·4941·4e5f·4652·4f4e·5445·4e44·3d6e·6f6e··IAN_FRONTEND=non | |||
| 0004d040:·696e·7465·7261·6374·6976·6520·6170·742d··interactive·apt- | |||
| 0004d050:·6765·7420·696e·7374·616c·6c20·2d79·2022··get·install·-y·" | |||
| 0004d060:·7273·7973·6c6f·6722·0a0a·656c·7365·0a20··rsyslog"..else.· | |||
| 0004d070:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0004d080:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0004d090:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0004d0a0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0004d0b0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0004d0c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0004d0d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0004d0e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0004d0f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0004d100:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | |||
| 0004d110:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | |||
| 0004d120:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0004d130:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0004d140:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0004d150:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0004d160:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0004d170:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0004d180:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004d190:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004d1a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004d1b0:·6170·7365·2220·6964·3d22·6964·6d34·3831··apse"·id="idm481 | |||
| 0004d1c0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0004d1d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0004d1e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0004d1f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0004d200:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0004d210:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0004d220:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004d230:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0004d240:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004d250:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0004d260:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0004d270:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0004d280:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0004d290:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0004d2a0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0004d2b0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0004d2c0:·653a·2045·6e73·7572·6520·7273·7973·6c6f··e:·Ensure·rsyslo | |||
| 0004d2d0:·6720·6973·2069·6e73·7461·6c6c·6564·0a20··g·is·installed.· | |||
| 0004d2e0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0004d2f0:·6d65·3a20·7273·7973·6c6f·670a·2020·2020··me:·rsyslog.···· | |||
| 0004d300:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0004d310:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0004d320:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0004d330:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0004d340:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0004d350:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0004d360:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0004d370:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0004d380:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0004d390:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0004d3a0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0004d3b0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0004d3c0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0004d3d0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0004d3e0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0004d3f0:·2020·2d20·7061·636b·6167·655f·7273·7973····-·package_rsys | |||
| 0004d400:·6c6f·675f·696e·7374·616c·6c65·640a·3c2f··log_installed.</ | |||
| 0004 | 0004cf00:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0004 | 0004cf10:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0004 | 0004cf20:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0004 | 0004cf30:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0004 | 0004cf40:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| Max diff block lines reached; 110592/127758 bytes (86.56%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1531, 14 lines modified | Offset 1531, 19 lines modified | ||
| 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1537 | ···························SRG-OS-000480-GPOS-00227 | 1537 | ···························SRG-OS-000480-GPOS-00227 |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"rsyslog" | ||
| 1541 | version·=·"*" | ||
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1543 | #·Remediation·is·applicable·only·in·certain·platforms | 1547 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1544 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1548 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1563, 19 lines modified | Offset 1568, 14 lines modified | ||
| 1563 | ··-·NIST-800-53-CM-6(a) | 1568 | ··-·NIST-800-53-CM-6(a) |
| 1564 | ··-·enable_strategy | 1569 | ··-·enable_strategy |
| 1565 | ··-·low_complexity | 1570 | ··-·low_complexity |
| 1566 | ··-·low_disruption | 1571 | ··-·low_disruption |
| 1567 | ··-·medium_severity | 1572 | ··-·medium_severity |
| 1568 | ··-·no_reboot_needed | 1573 | ··-·no_reboot_needed |
| 1569 | ··-·package_rsyslog_installed | 1574 | ··-·package_rsyslog_installed |
| 1570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1571 | [[packages]] | ||
| 1572 | name·=·"rsyslog" | ||
| 1573 | version·=·"*" | ||
| 1574 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1575 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1576 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1577 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1578 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1579 | include·install_rsyslog | 1580 | include·install_rsyslog |
| Offset 1605, 14 lines modified | Offset 1605, 18 lines modified | ||
| 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | [customizations.services] | ||
| 1614 | enabled·=·["rsyslog"] | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1620 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1618 | ··block: | 1621 | ··block: |
| Offset 1636, 18 lines modified | Offset 1640, 14 lines modified | ||
| 1636 | ··-·NIST-800-53-CM-6(a) | 1640 | ··-·NIST-800-53-CM-6(a) |
| 1637 | ··-·enable_strategy | 1641 | ··-·enable_strategy |
| 1638 | ··-·low_complexity | 1642 | ··-·low_complexity |
| 1639 | ··-·low_disruption | 1643 | ··-·low_disruption |
| 1640 | ··-·medium_severity | 1644 | ··-·medium_severity |
| 1641 | ··-·no_reboot_needed | 1645 | ··-·no_reboot_needed |
| 1642 | ··-·service_rsyslog_enabled | 1646 | ··-·service_rsyslog_enabled |
| 1643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1644 | [customizations.services] | ||
| 1645 | enabled·=·["rsyslog"] | ||
| 1646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1651 | include·enable_rsyslog | 1652 | include·enable_rsyslog |
| Offset 3345, 14 lines modified | Offset 3345, 19 lines modified | ||
| 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3347 | ···························SR·2.7,·SR·7.6 | 3347 | ···························SR·2.7,·SR·7.6 |
| 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3349 | ···························A.14.2.4,·A.9.1.2 | 3349 | ···························A.14.2.4,·A.9.1.2 |
| 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3353 | [[packages]] | ||
| 3354 | name·=·"cron" | ||
| 3355 | version·=·"*" | ||
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3357 | #·Remediation·is·applicable·only·in·certain·platforms | 3361 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3358 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3362 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3377, 19 lines modified | Offset 3382, 14 lines modified | ||
| 3377 | ··-·NIST-800-53-CM-6(a) | 3382 | ··-·NIST-800-53-CM-6(a) |
| 3378 | ··-·enable_strategy | 3383 | ··-·enable_strategy |
| 3379 | ··-·low_complexity | 3384 | ··-·low_complexity |
| 3380 | ··-·low_disruption | 3385 | ··-·low_disruption |
| 3381 | ··-·medium_severity | 3386 | ··-·medium_severity |
| 3382 | ··-·no_reboot_needed | 3387 | ··-·no_reboot_needed |
| 3383 | ··-·package_cron_installed | 3388 | ··-·package_cron_installed |
| 3384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3385 | [[packages]] | ||
| 3386 | name·=·"cron" | ||
| 3387 | version·=·"*" | ||
| 3388 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 8013/13900 bytes (57.65%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e50:·3032·3 | 00037e50:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15038, 129 lines modified | Offset 15038, 129 lines modified | ||
| 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | ||
| 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac40:·6d65·6469·6174·696f·6e20· | 0003ac40:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003ac50:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003ac60:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ac70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ac80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac90:·7365·2220·6964·3d22·6964·6d32·3636·3222··se"·id="idm2662" | |||
| 0003ac50:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003ac60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ac70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ac80:·6c61·7073·6522·2069·643d·2269·646d·3236··lapse"·id="idm26 | |||
| 0003ac90:·3632·223e·3c74·6162·6c65·2063·6c61·7373··62"><table·class | |||
| 0003aca0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003acb0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003acc0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003acd0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ace0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003acf0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ad00:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ad10:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ad20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ad30:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003ad40:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ad50:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ad60:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003ad70:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003a | 0003aca0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003acb0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003acc0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003acd0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ace0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003acf0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ad00:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ad10:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ad20:·7461·7267·6574·3d22·2369·646d·3236·3633··target="#idm2663 | |||
| 0003ad30:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad40:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ad50:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ad60:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ad70:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ad80:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ad90:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003ad90:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003ada0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003adb0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003adc0:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003add0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003ade0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003adf0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003ae00:·3b20·7468·656e·0a0a·4445·4249·414e·5f46··;·then..DEBIAN_F | |||
| 0003ae10:·524f·4e54·454e·443d·6e6f·6e69·6e74·6572··RONTEND=noninter | |||
| 0003ae20:·6163·7469·7665·2061·7074·2d67·6574·2069··active·apt-get·i | |||
| 0003ae30:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003ae40:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003ae50:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003ae60:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003ae70:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003ae80:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003ae90:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003aea0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003aeb0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003aec0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003aed0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003aee0:·3d22·2369·646d·3236·3633·2220·7461·6269··="#idm2663"·tabi | |||
| 0003aef0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003af00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003af10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003af20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003af30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003af40:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003af50:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003af60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003af70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003af80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003af90:·3d22·6964·6d32·3636·3322·3e3c·7461·626c··="idm2663"><tabl | |||
| 0003afa0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003afb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003afc0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003afd0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003afe0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aff0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b000:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b010:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b020:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b030:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b040:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b050:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b060:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b070:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b080:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b090:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b0a0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b0b0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b0c0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b0d0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b0e0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b0f0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b100:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b110:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b120:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b130:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b140:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b150:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b160:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b170:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| Max diff block lines reached; 194504/212084 bytes (91.71%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 147, 19 lines modified | Offset 152, 14 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 154 | ··-·low_complexity |
| 150 | ··-·low_disruption | 155 | ··-·low_disruption |
| 151 | ··-·medium_severity | 156 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | include·install_aide | 164 | include·install_aide |
| Offset 596, 14 lines modified | Offset 596, 19 lines modified | ||
| 596 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 596 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 597 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 597 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 598 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 598 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 599 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 599 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 600 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 600 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 601 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 601 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 602 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 602 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 604 | [[packages]] | ||
| 605 | name·=·"sudo" | ||
| 606 | version·=·"*" | ||
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 604 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 605 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 606 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 607 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 608 | #·Remediation·is·applicable·only·in·certain·platforms | 612 | #·Remediation·is·applicable·only·in·certain·platforms |
| 609 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 613 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 628, 19 lines modified | Offset 633, 14 lines modified | ||
| 628 | ··-·PCI-DSSv4-2.2.6 | 633 | ··-·PCI-DSSv4-2.2.6 |
| 629 | ··-·enable_strategy | 634 | ··-·enable_strategy |
| 630 | ··-·low_complexity | 635 | ··-·low_complexity |
| 631 | ··-·low_disruption | 636 | ··-·low_disruption |
| 632 | ··-·medium_severity | 637 | ··-·medium_severity |
| 633 | ··-·no_reboot_needed | 638 | ··-·no_reboot_needed |
| 634 | ··-·package_sudo_installed | 639 | ··-·package_sudo_installed |
| 635 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 636 | [[packages]] | ||
| 637 | name·=·"sudo" | ||
| 638 | version·=·"*" | ||
| 639 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 640 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 641 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 641 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 642 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 642 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 643 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 643 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 644 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 644 | include·install_sudo | 645 | include·install_sudo |
| Offset 5198, 14 lines modified | Offset 5198, 19 lines modified | ||
| 5198 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces | 5198 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces |
| 5199 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force | 5199 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force |
| 5200 | ············attacks·on·the·system. | 5200 | ············attacks·on·the·system. |
| 5201 | Severity: ··medium | 5201 | Severity: ··medium |
| 5202 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 5202 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 5203 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5203 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5204 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 5204 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 5205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5206 | [[packages]] | ||
| 5207 | name·=·"libpam-pwquality" | ||
| 5208 | version·=·"*" | ||
| 5205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 5209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 5206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5210 | #·Remediation·is·applicable·only·in·certain·platforms | 5214 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5211 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 5215 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 5240, 19 lines modified | Offset 5245, 14 lines modified | ||
| 5240 | ··tags: | 5245 | ··tags: |
| 5241 | ··-·enable_strategy | 5246 | ··-·enable_strategy |
| 5242 | ··-·low_complexity | 5247 | ··-·low_complexity |
| 5243 | ··-·low_disruption | 5248 | ··-·low_disruption |
| 5244 | ··-·medium_severity | 5249 | ··-·medium_severity |
| 5245 | ··-·no_reboot_needed | 5250 | ··-·no_reboot_needed |
| 5246 | ··-·package_pam_pwquality_installed | 5251 | ··-·package_pam_pwquality_installed |
| 5247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5248 | [[packages]] | ||
| 5249 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 16660/22267 bytes (74.82%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e40:·3 | 00037e40:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15043, 129 lines modified | Offset 15043, 129 lines modified | ||
| 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | ||
| 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ac90:·656d·6564·6961·7469·6f6e·20 | 0003ac90:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003aca0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003acb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003acc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003acd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ace0:·7073·6522·2069·643d·2269·646d·3236·3632··pse"·id="idm2662 | |||
| 0003aca0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003acb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003acc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003acd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ace0:·3636·3222·3e3c·7461·626c·6520·636c·6173··662"><table·clas | |||
| 0003acf0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ad00:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ad10:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ad20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ad30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ad40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ad50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ad60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ad70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ad80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ad90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ada0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003adb0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003adc0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a | 0003acf0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003ad00:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad10:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ad20:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ad30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ad50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ad60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ad70:·2d74·6172·6765·743d·2223·6964·6d32·3636··-target="#idm266 | |||
| 0003ad80:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003ad90:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ada0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003adb0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003adc0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003add0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ade0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003ade0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003adf0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003ae00:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003ae10:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003ae20:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003ae30:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003ae40:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003ae50:·5d3b·2074·6865·6e0a·0a44·4542·4941·4e5f··];·then..DEBIAN_ | |||
| 0003ae60:·4652·4f4e·5445·4e44·3d6e·6f6e·696e·7465··FRONTEND=noninte | |||
| 0003ae70:·7261·6374·6976·6520·6170·742d·6765·7420··ractive·apt-get· | |||
| 0003ae80:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003ae90:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003aea0:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003aeb0:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003aec0:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003aed0:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003aee0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003aef0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003af00:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003af10:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003af20:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003af30:·743d·2223·6964·6d32·3636·3322·2074·6162··t="#idm2663"·tab | |||
| 0003af40:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003af50:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003af60:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003af70:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003af80:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003af90:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003afa0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003afb0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003afc0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003afd0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afe0:·643d·2269·646d·3236·3633·223e·3c74·6162··d="idm2663"><tab | |||
| 0003aff0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b000:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b010:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b020:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b030:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b040:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b050:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b060:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b070:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b080:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b090:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b0b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b0c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b0d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b0e0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b0f0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b100:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b110:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b120:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b130:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b140:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b150:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b160:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b170:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b180:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b190:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b1a0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b1b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b1c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| Max diff block lines reached; 194642/212222 bytes (91.72%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 131 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 148, 19 lines modified | Offset 153, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 155 | ··-·low_complexity |
| 151 | ··-·low_disruption | 156 | ··-·low_disruption |
| 152 | ··-·medium_severity | 157 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | include·install_aide | 165 | include·install_aide |
| Offset 1287, 14 lines modified | Offset 1287, 19 lines modified | ||
| 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 1288 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1288 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1289 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1289 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1290 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1290 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1291 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1291 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1292 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1292 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1295 | [[packages]] | ||
| 1296 | name·=·"sudo" | ||
| 1297 | version·=·"*" | ||
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1299 | #·Remediation·is·applicable·only·in·certain·platforms | 1303 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1300 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1304 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1319, 19 lines modified | Offset 1324, 14 lines modified | ||
| 1319 | ··-·PCI-DSSv4-2.2.6 | 1324 | ··-·PCI-DSSv4-2.2.6 |
| 1320 | ··-·enable_strategy | 1325 | ··-·enable_strategy |
| 1321 | ··-·low_complexity | 1326 | ··-·low_complexity |
| 1322 | ··-·low_disruption | 1327 | ··-·low_disruption |
| 1323 | ··-·medium_severity | 1328 | ··-·medium_severity |
| 1324 | ··-·no_reboot_needed | 1329 | ··-·no_reboot_needed |
| 1325 | ··-·package_sudo_installed | 1330 | ··-·package_sudo_installed |
| 1326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1327 | [[packages]] | ||
| 1328 | name·=·"sudo" | ||
| 1329 | version·=·"*" | ||
| 1330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1335 | include·install_sudo | 1336 | include·install_sudo |
| Offset 5889, 14 lines modified | Offset 5889, 19 lines modified | ||
| 5889 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces | 5889 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces |
| 5890 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force | 5890 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force |
| 5891 | ············attacks·on·the·system. | 5891 | ············attacks·on·the·system. |
| 5892 | Severity: ··medium | 5892 | Severity: ··medium |
| 5893 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 5893 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 5894 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5894 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5895 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 5895 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 5896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5897 | [[packages]] | ||
| 5898 | name·=·"libpam-pwquality" | ||
| 5899 | version·=·"*" | ||
| 5896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 5900 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 5897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5901 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5902 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5903 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5904 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5901 | #·Remediation·is·applicable·only·in·certain·platforms | 5905 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5902 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 5906 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 5931, 19 lines modified | Offset 5936, 14 lines modified | ||
| 5931 | ··tags: | 5936 | ··tags: |
| 5932 | ··-·enable_strategy | 5937 | ··-·enable_strategy |
| 5933 | ··-·low_complexity | 5938 | ··-·low_complexity |
| 5934 | ··-·low_disruption | 5939 | ··-·low_disruption |
| 5935 | ··-·medium_severity | 5940 | ··-·medium_severity |
| 5936 | ··-·no_reboot_needed | 5941 | ··-·no_reboot_needed |
| 5937 | ··-·package_pam_pwquality_installed | 5942 | ··-·package_pam_pwquality_installed |
| 5938 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5939 | [[packages]] | ||
| 5940 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 16660/22275 bytes (74.79%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e60:·3 | 00037e60:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15029, 129 lines modified | Offset 15029, 129 lines modified | ||
| 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | ||
| 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003abb0:·6564·6961·7469·6f6e·20 | 0003abb0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003abc0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003abd0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003abe0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003abf0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ac00:·6522·2069·643d·2269·646d·3236·3632·223e··e"·id="idm2662"> | |||
| 0003abc0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003abd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003abe0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003abf0:·6170·7365·2220·6964·3d22·6964·6d32·3636··apse"·id="idm266 | |||
| 0003ac00:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003ac10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ac20:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ac30:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ac40:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ac50:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ac60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ac70:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ac80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ac90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003aca0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003acb0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003acc0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003acd0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003ace0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003ac | 0003ac10:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003ac20:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ac30:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003ac40:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003ac50:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ac60:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ac70:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ac80:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ac90:·6172·6765·743d·2223·6964·6d32·3636·3322··arget="#idm2663" | |||
| 0003aca0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003acb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003acc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003acd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ace0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003acf0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003ad00:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ad00:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003ad10:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003ad20:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003ad30:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003ad40:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003ad50:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003ad60:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003ad70:·2074·6865·6e0a·0a44·4542·4941·4e5f·4652···then..DEBIAN_FR | |||
| 0003ad80:·4f4e·5445·4e44·3d6e·6f6e·696e·7465·7261··ONTEND=nonintera | |||
| 0003ad90:·6374·6976·6520·6170·742d·6765·7420·696e··ctive·apt-get·in | |||
| 0003ada0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003adb0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003adc0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003add0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003ade0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003adf0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003ae00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ae10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ae20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ae30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ae40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ae50:·2223·6964·6d32·3636·3322·2074·6162·696e··"#idm2663"·tabin | |||
| 0003ae60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ae70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ae80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ae90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003aea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003aeb0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003aec0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aed0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aee0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aef0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af00:·2269·646d·3236·3633·223e·3c74·6162·6c65··"idm2663"><table | |||
| 0003af10:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003af20:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003af30:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af40:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af50:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af70:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af80:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003af90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003afa0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003afb0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003afc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003afd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003afe0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003aff0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b000:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b010:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b020:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b030:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b040:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b050:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b060:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b070:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b080:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b090:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b0a0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b0b0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0c0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b0d0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b0e0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| Max diff block lines reached; 73256/90836 bytes (80.65%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 19 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | 127 | #·Remediation·is·applicable·only·in·certain·platforms |
| 124 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 128 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | include·install_aide | 162 | include·install_aide |
| Offset 568, 14 lines modified | Offset 568, 19 lines modified | ||
| 568 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 568 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 569 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 569 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 570 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 571 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 571 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 573 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 573 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 574 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 574 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 576 | [[packages]] | ||
| 577 | name·=·"sudo" | ||
| 578 | version·=·"*" | ||
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 580 | #·Remediation·is·applicable·only·in·certain·platforms | 584 | #·Remediation·is·applicable·only·in·certain·platforms |
| 581 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 585 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 600, 19 lines modified | Offset 605, 14 lines modified | ||
| 600 | ··-·PCI-DSSv4-2.2.6 | 605 | ··-·PCI-DSSv4-2.2.6 |
| 601 | ··-·enable_strategy | 606 | ··-·enable_strategy |
| 602 | ··-·low_complexity | 607 | ··-·low_complexity |
| 603 | ··-·low_disruption | 608 | ··-·low_disruption |
| 604 | ··-·medium_severity | 609 | ··-·medium_severity |
| 605 | ··-·no_reboot_needed | 610 | ··-·no_reboot_needed |
| 606 | ··-·package_sudo_installed | 611 | ··-·package_sudo_installed |
| 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 608 | [[packages]] | ||
| 609 | name·=·"sudo" | ||
| 610 | version·=·"*" | ||
| 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 616 | include·install_sudo | 617 | include·install_sudo |
| Offset 5084, 14 lines modified | Offset 5084, 19 lines modified | ||
| 5084 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces | 5084 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces |
| 5085 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force | 5085 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force |
| 5086 | ············attacks·on·the·system. | 5086 | ············attacks·on·the·system. |
| 5087 | Severity: ··medium | 5087 | Severity: ··medium |
| 5088 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 5088 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 5089 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5089 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5090 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 5090 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 5091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5092 | [[packages]] | ||
| 5093 | name·=·"libpam-pwquality" | ||
| 5094 | version·=·"*" | ||
| 5091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 5095 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 5092 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5096 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5093 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5097 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5094 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5098 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5095 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5099 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5096 | #·Remediation·is·applicable·only·in·certain·platforms | 5100 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5097 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 5101 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 5126, 19 lines modified | Offset 5131, 14 lines modified | ||
| 5126 | ··tags: | 5131 | ··tags: |
| 5127 | ··-·enable_strategy | 5132 | ··-·enable_strategy |
| 5128 | ··-·low_complexity | 5133 | ··-·low_complexity |
| 5129 | ··-·low_disruption | 5134 | ··-·low_disruption |
| 5130 | ··-·medium_severity | 5135 | ··-·medium_severity |
| 5131 | ··-·no_reboot_needed | 5136 | ··-·no_reboot_needed |
| 5132 | ··-·package_pam_pwquality_installed | 5137 | ··-·package_pam_pwquality_installed |
| 5133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5134 | [[packages]] | ||
| 5135 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 3584/9310 bytes (38.50%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037e50:·2d32·3 | 00037e50:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 27681, 141 lines modified | Offset 27681, 141 lines modified | ||
| 0006c200:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0006c200:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0006c210:·2223·6964·6d34·3336·3722·2074·6162·696e··"#idm4367"·tabin | 0006c210:·2223·6964·6d34·3336·3722·2074·6162·696e··"#idm4367"·tabin | ||
| 0006c220:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0006c220:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0006c230:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0006c230:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0006c240:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0006c240:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0006c250:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0006c250:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0006c260:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0006c260:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0006c270:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0006c280:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0006c290:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0006c2a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0006c2b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0006c2c0:·6d34·3336·3722·3e3c·7461·626c·6520·636c··m4367"><table·cl | |||
| 0006c2d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0006c2e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0006c2f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0006c300:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0006c310:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0006c320:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0006c330:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0006c340:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0006c350:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0006c360:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0006c370:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0006c380:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0006c390:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0006c3a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0006c3b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0006c3c0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0006c3d0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0006c3e0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0006c3f0:·6f72·6d73·0a69·6620·6470·6b67·2d71·7565··orms.if·dpkg-que | |||
| 0006c400:·7279·202d·2d73·686f·7720·2d2d·7368·6f77··ry·--show·--show | |||
| 0006c410:·666f·726d·6174·3d27·247b·6462·3a53·7461··format='${db:Sta | |||
| 0006c420:·7475·732d·5374·6174·7573·7d5c·6e27·2027··tus-Status}\n'·' | |||
| 0006c430:·6c69·6270·616d·2d72·756e·7469·6d65·2720··libpam-runtime'· | |||
| 0006c440:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | |||
| 0006c450:·2067·7265·7020·2d71·2069·6e73·7461·6c6c···grep·-q·install | |||
| 0006c460:·6564·3b20·7468·656e·0a0a·4445·4249·414e··ed;·then..DEBIAN | |||
| 0006c470:·5f46·524f·4e54·454e·443d·6e6f·6e69·6e74··_FRONTEND=nonint | |||
| 0006c480:·6572·6163·7469·7665·2061·7074·2d67·6574··eractive·apt-get | |||
| 0006c490:·2069·6e73·7461·6c6c·202d·7920·226c·6962···install·-y·"lib | |||
| 0006c4a0:·7061·6d2d·7077·7175·616c·6974·7922·0a0a··pam-pwquality".. | |||
| 0006c4b0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0006c4c0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0006c4d0:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0006c4e0:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0006c4f0:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0006c500:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0006c510:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0006c520:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0006c530:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0006c540:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0006c550:·2369·646d·3433·3638·2220·7461·6269·6e64··#idm4368"·tabind | |||
| 0006c560:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0006c570:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0006c580:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0006c590:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0006c5a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0006c5b0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0006c5c0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0006c5d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0006c5e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0006c5f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0006c600:·6964·6d34·3336·3822·3e3c·7461·626c·6520··idm4368"><table· | |||
| 0006c610:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0006c620:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0006c630:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0006c640:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0006c650:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0006c660:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0006c670:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0006c680:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0006c690:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0006c6a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0006c6b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0006c6c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0006c6d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0006c6e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0006c6f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0006c700:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0006c710:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0006c720:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0006c730:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0006c740:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0006c750:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0006c760:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0006c770:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0006c780:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0006c790:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0006c7a0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0006c7b0:·2020·2d20·7061·636b·6167·655f·7061·6d5f····-·package_pam_ | |||
| 0006c7c0:·7077·7175·616c·6974·795f·696e·7374·616c··pwquality_instal | |||
| 0006c7d0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0006c7e0:·7572·6520·6c69·6270·616d·2d70·7771·7561··ure·libpam-pwqua | |||
| 0006c7f0:·6c69·7479·2069·7320·696e·7374·616c·6c65··lity·is·installe | |||
| 0006c800:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0006c810:·206e·616d·653a·206c·6962·7061·6d2d·7077···name:·libpam-pw | |||
| 0006c820:·7175·616c·6974·790a·2020·2020·7374·6174··quality.····stat | |||
| 0006c830:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0006c840:·6e3a·2027·226c·6962·7061·6d2d·7275·6e74··n:·'"libpam-runt | |||
| 0006c850:·696d·6522·2069·6e20·616e·7369·626c·655f··ime"·in·ansible_ | |||
| 0006c860:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0006c870:·2020·7461·6773·3a0a·2020·2d20·656e·6162····tags:.··-·enab | |||
| 0006c880:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0006c890:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0006c8a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0006c8b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0006c8c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0006c8d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| Max diff block lines reached; 414/19788 bytes (2.09%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 3895, 14 lines modified | Offset 3895, 19 lines modified | ||
| 3895 | Rationale:··effectiveness·of·a·password·in·resisting·attempts·at·guessing·and·brute-force | 3895 | Rationale:··effectiveness·of·a·password·in·resisting·attempts·at·guessing·and·brute-force |
| 3896 | ············attacks.·"pwquality"·enforces·complex·password·construction·configuration·and·has | 3896 | ············attacks.·"pwquality"·enforces·complex·password·construction·configuration·and·has |
| 3897 | ············the·ability·to·limit·brute-force·attacks·on·the·system. | 3897 | ············the·ability·to·limit·brute-force·attacks·on·the·system. |
| 3898 | Severity: ··medium | 3898 | Severity: ··medium |
| 3899 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3899 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3900 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 3900 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 3901 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 3901 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 3902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3903 | [[packages]] | ||
| 3904 | name·=·"libpam-pwquality" | ||
| 3905 | version·=·"*" | ||
| 3902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3907 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3908 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3909 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3910 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3907 | #·Remediation·is·applicable·only·in·certain·platforms | 3911 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3908 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep | 3912 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep |
| Offset 3937, 19 lines modified | Offset 3942, 14 lines modified | ||
| 3937 | ··tags: | 3942 | ··tags: |
| 3938 | ··-·enable_strategy | 3943 | ··-·enable_strategy |
| 3939 | ··-·low_complexity | 3944 | ··-·low_complexity |
| 3940 | ··-·low_disruption | 3945 | ··-·low_disruption |
| 3941 | ··-·medium_severity | 3946 | ··-·medium_severity |
| 3942 | ··-·no_reboot_needed | 3947 | ··-·no_reboot_needed |
| 3943 | ··-·package_pam_pwquality_installed | 3948 | ··-·package_pam_pwquality_installed |
| 3944 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3945 | [[packages]] | ||
| 3946 | name·=·"libpam-pwquality" | ||
| 3947 | version·=·"*" | ||
| 3948 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3949 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3949 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3950 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3950 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3951 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3951 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3952 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3952 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3953 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3953 | include·install_libpam-pwquality | 3954 | include·install_libpam-pwquality |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 20541, 127 lines modified | Offset 20541, 127 lines modified | ||
| 000503c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000503c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000503d0:·6d31·3037·3034·2220·7461·6269·6e64·6578··m10704"·tabindex | 000503d0:·6d31·3037·3034·2220·7461·6269·6e64·6578··m10704"·tabindex | ||
| 000503e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000503e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000503f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000503f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00050400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00050400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00050410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00050410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00050420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00050420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00050430:·6d65·6469·6174·696f·6e20· | 00050430:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00050440:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00050450:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00050460:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00050470:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00050480:·7365·2220·6964·3d22·6964·6d31·3037·3034··se"·id="idm10704 | |||
| 00050440:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00050450:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00050460:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00050470:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00050480:·3730·3422·3e3c·7461·626c·6520·636c·6173··704"><table·clas | |||
| 00050490:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000504a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000504b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000504c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000504d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000504e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000504f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00050500:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00050510:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00050520:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00050530:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00050540:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00050550:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00050560:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00050 | 00050490:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 000504a0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 000504b0:·3d20·2273·7973·6c6f·672d·6e67·220a·7665··=·"syslog-ng".ve | |||
| 000504c0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 000504d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000504e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000504f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00050500:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00050510:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00050520:·646d·3130·3730·3522·2074·6162·696e·6465··dm10705"·tabinde | |||
| 00050530:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00050540:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00050550:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00050560:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00050570:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00050580:·656d·6564·6961·7469·6f6e·20 | 00050580:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 00050590:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 000505a0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 000505b0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 000505c0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 000505d0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 000505e0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 000505f0:·5d3b·2074·6865·6e0a·0a44·4542·4941·4e5f··];·then..DEBIAN_ | |||
| 00050600:·4652·4f4e·5445·4e44·3d6e·6f6e·696e·7465··FRONTEND=noninte | |||
| 00050610:·7261·6374·6976·6520·6170·742d·6765·7420··ractive·apt-get· | |||
| 00050620:·696e·7374·616c·6c20·2d79·2022·7379·736c··install·-y·"sysl | |||
| 00050630:·6f67·2d6e·6722·0a0a·656c·7365·0a20·2020··og-ng"..else.··· | |||
| 00050 | 00050590:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 000505a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 000505b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 000505c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 000505d0:·3037·3035·223e·3c74·6162·6c65·2063·6c61··0705"><table·cla | |||
| 000505e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000505f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00050600:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00050610:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00050620:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00050630:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00050640:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00050650:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00050660:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00050670:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00050680:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00050690:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 000506a0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 000506b0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000506c0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 000506 | 000506d0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 00050660:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 00050670:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 00050680:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 00050690:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000506a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 000506b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 000506c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 000506d0:·7461·7267·6574·3d22·2369·646d·3130·3730··target="#idm1070 | |||
| 000506e0:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 000506f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00050700:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00050710:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00050720:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00050730:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00050740:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00050750:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00050760:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00050770:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00050780:·7073·6522·2069·643d·2269·646d·3130·3730··pse"·id="idm1070 | |||
| 00050790:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 00050 | 000506e0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000506f0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 00050700:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 00050710:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 00050720:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 00050730:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 00050740:·205d·3b20·7468·656e·0a0a·4445·4249·414e···];·then..DEBIAN | |||
| 00050750:·5f46·524f·4e54·454e·443d·6e6f·6e69·6e74··_FRONTEND=nonint | |||
| 00050760:·6572·6163·7469·7665·2061·7074·2d67·6574··eractive·apt-get | |||
| 00050770:·2069·6e73·7461·6c6c·202d·7920·2273·7973···install·-y·"sys | |||
| 00050780:·6c6f·672d·6e67·220a·0a65·6c73·650a·2020··log-ng"..else.·· | |||
| Max diff block lines reached; 58206/75510 bytes (77.08%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1715, 14 lines modified | Offset 1715, 19 lines modified | ||
| 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1717 | References:················4.4.2.4 | 1717 | References:················4.4.2.4 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1723 | [[packages]] | ||
| 1724 | name·=·"syslog-ng" | ||
| 1725 | version·=·"*" | ||
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1727 | #·Remediation·is·applicable·only·in·certain·platforms | 1731 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1728 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1732 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1747, 19 lines modified | Offset 1752, 14 lines modified | ||
| 1747 | ··-·NIST-800-53-CM-6(a) | 1752 | ··-·NIST-800-53-CM-6(a) |
| 1748 | ··-·enable_strategy | 1753 | ··-·enable_strategy |
| 1749 | ··-·low_complexity | 1754 | ··-·low_complexity |
| 1750 | ··-·low_disruption | 1755 | ··-·low_disruption |
| 1751 | ··-·medium_severity | 1756 | ··-·medium_severity |
| 1752 | ··-·no_reboot_needed | 1757 | ··-·no_reboot_needed |
| 1753 | ··-·package_syslogng_installed | 1758 | ··-·package_syslogng_installed |
| 1754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1755 | [[packages]] | ||
| 1756 | name·=·"syslog-ng" | ||
| 1757 | version·=·"*" | ||
| 1758 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1759 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1760 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1761 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1761 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1762 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1762 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1763 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1763 | include·install_syslog-ng | 1764 | include·install_syslog-ng |
| Offset 1787, 14 lines modified | Offset 1787, 18 lines modified | ||
| 1787 | ···························4.4.2.2,·4.4.2.4 | 1787 | ···························4.4.2.2,·4.4.2.4 |
| 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1795 | [customizations.services] | ||
| 1796 | enabled·=·["syslog-ng"] | ||
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1799 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1802 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1800 | ··block: | 1803 | ··block: |
| Offset 1818, 18 lines modified | Offset 1822, 14 lines modified | ||
| 1818 | ··-·NIST-800-53-CM-6(a) | 1822 | ··-·NIST-800-53-CM-6(a) |
| 1819 | ··-·enable_strategy | 1823 | ··-·enable_strategy |
| 1820 | ··-·low_complexity | 1824 | ··-·low_complexity |
| 1821 | ··-·low_disruption | 1825 | ··-·low_disruption |
| 1822 | ··-·medium_severity | 1826 | ··-·medium_severity |
| 1823 | ··-·no_reboot_needed | 1827 | ··-·no_reboot_needed |
| 1824 | ··-·service_syslogng_enabled | 1828 | ··-·service_syslogng_enabled |
| 1825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1826 | [customizations.services] | ||
| 1827 | enabled·=·["syslog-ng"] | ||
| 1828 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1829 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1830 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1830 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1831 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1831 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1832 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1832 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1833 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1833 | include·enable_syslog-ng | 1834 | include·enable_syslog-ng |
| Offset 1856, 14 lines modified | Offset 1856, 19 lines modified | ||
| 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1862 | ···························SRG-OS-000480-GPOS-00227 | 1862 | ···························SRG-OS-000480-GPOS-00227 |
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1864 | [[packages]] | ||
| 1865 | name·=·"rsyslog" | ||
| 1866 | version·=·"*" | ||
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1868 | #·Remediation·is·applicable·only·in·certain·platforms | 1872 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1869 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1873 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1888, 19 lines modified | Offset 1893, 14 lines modified | ||
| 1888 | ··-·NIST-800-53-CM-6(a) | 1893 | ··-·NIST-800-53-CM-6(a) |
| 1889 | ··-·enable_strategy | 1894 | ··-·enable_strategy |
| 1890 | ··-·low_complexity | 1895 | ··-·low_complexity |
| 1891 | ··-·low_disruption | 1896 | ··-·low_disruption |
| 1892 | ··-·medium_severity | 1897 | ··-·medium_severity |
| 1893 | ··-·no_reboot_needed | 1898 | ··-·no_reboot_needed |
| 1894 | ··-·package_rsyslog_installed | 1899 | ··-·package_rsyslog_installed |
| 1895 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1896 | [[packages]] | ||
| 1897 | name·=·"rsyslog" | ||
| 1898 | version·=·"*" | ||
| 1899 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1900 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 3425/9372 bytes (36.55%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d40:·3 | 00037d40:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 21117, 126 lines modified | Offset 21117, 126 lines modified | ||
| 000527c0:·6765·743d·2223·6964·6d31·3037·3034·2220··get="#idm10704"· | 000527c0:·6765·743d·2223·6964·6d31·3037·3034·2220··get="#idm10704"· | ||
| 000527d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 000527d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 000527e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 000527e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 000527f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 000527f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00052800:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00052800:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00052810:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00052810:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00052820:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00052820:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00052830:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 00052840:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00052850:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00052860:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00052870:·643d·2269·646d·3130·3730·3422·3e3c·7461··d="idm10704"><ta | |||
| 00052880:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00052890:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000528a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 000528b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 000528c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 000528d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 000528e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000528f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00052900:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00052910:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00052920:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00052930:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00052940:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00052950:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00052 | 00052830:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 00052840:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00052850:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00052860:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00052870:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00052880:·6964·6d31·3037·3034·223e·3c70·7265·3e3c··idm10704"><pre>< | |||
| 00052890:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 000528a0:·5d5d·0a6e·616d·6520·3d20·2273·7973·6c6f··]].name·=·"syslo | |||
| 000528b0:·672d·6e67·220a·7665·7273·696f·6e20·3d20··g-ng".version·=· | |||
| 000528c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 000528d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 000528e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 000528f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00052900:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00052910:·7267·6574·3d22·2369·646d·3130·3730·3522··rget="#idm10705" | |||
| 00052920:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00052930:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00052940:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00052950:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00052960:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00052970:·6 | 00052970:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 00052980:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00052990:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000529a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00052980:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 00052990:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 000529a0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 000529b0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 000529c0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 000529d0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 000529e0:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 000529f0:·0a44·4542·4941·4e5f·4652·4f4e·5445·4e44··.DEBIAN_FRONTEND | |||
| 00052a00:·3d6e·6f6e·696e·7465·7261·6374·6976·6520··=noninteractive· | |||
| 00052a10:·6170·742d·6765·7420·696e·7374·616c·6c20··apt-get·install· | |||
| 00052a20:·2d79·2022·7379·736c·6f67·2d6e·6722·0a0a··-y·"syslog-ng".. | |||
| 00052a30:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 00052a40:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 00052a50:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 00052a60:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 00052a70:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 00052a80:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00052a90:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00052aa0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00052ab0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00052ac0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00052ad0:·2369·646d·3130·3730·3522·2074·6162·696e··#idm10705"·tabin | |||
| 00052ae0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00052af0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00052b00:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00052b10:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00052b20:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00052b30:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 00052b40:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00052b50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00052b60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00052b70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00052b80:·2269·646d·3130·3730·3522·3e3c·7461·626c··"idm10705"><tabl | |||
| 00052b90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00052ba0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00052bb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00052bc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00052bd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00052be0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00052bf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00052c00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00052c10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00052c20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00052c30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00052c40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00052c50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00052c60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00052c70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00052c80:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00052c90:·6520·7379·736c·6f67·2d6e·6720·6973·2069··e·syslog-ng·is·i | |||
| 00052ca0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 00052cb0:·6765·3a0a·2020·2020·6e61·6d65·3a20·7379··ge:.····name:·sy | |||
| 00052cc0:·736c·6f67·2d6e·670a·2020·2020·7374·6174··slog-ng.····stat | |||
| 00052cd0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 00052ce0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 00052cf0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 00052d00:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 00052d10:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 00052d20:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 00052d30:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| Max diff block lines reached; 127594/144898 bytes (88.06%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1891, 14 lines modified | Offset 1891, 19 lines modified | ||
| 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1893 | References:················4.4.2.4 | 1893 | References:················4.4.2.4 |
| 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1899 | [[packages]] | ||
| 1900 | name·=·"syslog-ng" | ||
| 1901 | version·=·"*" | ||
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1903 | #·Remediation·is·applicable·only·in·certain·platforms | 1907 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1904 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1908 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1923, 19 lines modified | Offset 1928, 14 lines modified | ||
| 1923 | ··-·NIST-800-53-CM-6(a) | 1928 | ··-·NIST-800-53-CM-6(a) |
| 1924 | ··-·enable_strategy | 1929 | ··-·enable_strategy |
| 1925 | ··-·low_complexity | 1930 | ··-·low_complexity |
| 1926 | ··-·low_disruption | 1931 | ··-·low_disruption |
| 1927 | ··-·medium_severity | 1932 | ··-·medium_severity |
| 1928 | ··-·no_reboot_needed | 1933 | ··-·no_reboot_needed |
| 1929 | ··-·package_syslogng_installed | 1934 | ··-·package_syslogng_installed |
| 1930 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1931 | [[packages]] | ||
| 1932 | name·=·"syslog-ng" | ||
| 1933 | version·=·"*" | ||
| 1934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1935 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1935 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1936 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1936 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1937 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1937 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1938 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1938 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1939 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1939 | include·install_syslog-ng | 1940 | include·install_syslog-ng |
| Offset 1963, 14 lines modified | Offset 1963, 18 lines modified | ||
| 1963 | ···························4.4.2.2,·4.4.2.4 | 1963 | ···························4.4.2.2,·4.4.2.4 |
| 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1971 | [customizations.services] | ||
| 1972 | enabled·=·["syslog-ng"] | ||
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1971 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1974 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1972 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1975 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1973 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1976 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1974 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1977 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1975 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1978 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1976 | ··block: | 1979 | ··block: |
| Offset 1994, 18 lines modified | Offset 1998, 14 lines modified | ||
| 1994 | ··-·NIST-800-53-CM-6(a) | 1998 | ··-·NIST-800-53-CM-6(a) |
| 1995 | ··-·enable_strategy | 1999 | ··-·enable_strategy |
| 1996 | ··-·low_complexity | 2000 | ··-·low_complexity |
| 1997 | ··-·low_disruption | 2001 | ··-·low_disruption |
| 1998 | ··-·medium_severity | 2002 | ··-·medium_severity |
| 1999 | ··-·no_reboot_needed | 2003 | ··-·no_reboot_needed |
| 2000 | ··-·service_syslogng_enabled | 2004 | ··-·service_syslogng_enabled |
| 2001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2002 | [customizations.services] | ||
| 2003 | enabled·=·["syslog-ng"] | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2005 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2006 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2007 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2008 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2009 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2009 | include·enable_syslog-ng | 2010 | include·enable_syslog-ng |
| Offset 2032, 14 lines modified | Offset 2032, 19 lines modified | ||
| 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 2038 | ···························SRG-OS-000480-GPOS-00227 | 2038 | ···························SRG-OS-000480-GPOS-00227 |
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2040 | [[packages]] | ||
| 2041 | name·=·"rsyslog" | ||
| 2042 | version·=·"*" | ||
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2043 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2040 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2044 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2041 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2045 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2042 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2046 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2043 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2047 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2044 | #·Remediation·is·applicable·only·in·certain·platforms | 2048 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2045 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2049 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2064, 19 lines modified | Offset 2069, 14 lines modified | ||
| 2064 | ··-·NIST-800-53-CM-6(a) | 2069 | ··-·NIST-800-53-CM-6(a) |
| 2065 | ··-·enable_strategy | 2070 | ··-·enable_strategy |
| 2066 | ··-·low_complexity | 2071 | ··-·low_complexity |
| 2067 | ··-·low_disruption | 2072 | ··-·low_disruption |
| 2068 | ··-·medium_severity | 2073 | ··-·medium_severity |
| 2069 | ··-·no_reboot_needed | 2074 | ··-·no_reboot_needed |
| 2070 | ··-·package_rsyslog_installed | 2075 | ··-·package_rsyslog_installed |
| 2071 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2072 | [[packages]] | ||
| 2073 | name·=·"rsyslog" | ||
| 2074 | version·=·"*" | ||
| 2075 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2076 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9728/15680 bytes (62.04%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15652, 126 lines modified | Offset 15652, 126 lines modified | ||
| 0003d230:·6574·3d22·2369·646d·3130·3730·3422·2074··et="#idm10704"·t | 0003d230:·6574·3d22·2369·646d·3130·3730·3422·2074··et="#idm10704"·t | ||
| 0003d240:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003d240:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003d250:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003d250:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003d260:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003d260:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003d270:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003d270:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003d280:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003d280:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003d290:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003d290:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003d2a0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003d2b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003d2c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003d2d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003d2e0:·3d22·6964·6d31·3037·3034·223e·3c74·6162··="idm10704"><tab | |||
| 0003d2f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003d300:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003d310:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003d320:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003d330:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003d340:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003d350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003d360:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d370:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003d380:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003d390:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003d3a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003d3b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003d3c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003d | 0003d2a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003d2b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003d2c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003d2d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003d2e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003d2f0:·646d·3130·3730·3422·3e3c·7072·653e·3c63··dm10704"><pre><c | |||
| 0003d300:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003d310:·5d0a·6e61·6d65·203d·2022·7379·736c·6f67··].name·=·"syslog | |||
| 0003d320:·2d6e·6722·0a76·6572·7369·6f6e·203d·2022··-ng".version·=·" | |||
| 0003d330:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003d340:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003d350:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003d360:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003d370:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003d380:·6765·743d·2223·6964·6d31·3037·3035·2220··get="#idm10705"· | |||
| 0003d390:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003d3a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003d3b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003d3c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003d3d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003d3e0:· | 0003d3e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003d3f0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003d400:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003d410:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003d420:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003d430:·643d·2269·646d·3130·3730·3522·3e3c·7461··d="idm10705"><ta | |||
| 0003d440:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003d450:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003d460:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003d470:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003d480:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003d490:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003d4a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003d4b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003d3f0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003d400:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003d410:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003d420:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003d430:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003d440:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003d450:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003d460:·4445·4249·414e·5f46·524f·4e54·454e·443d··DEBIAN_FRONTEND= | |||
| 0003d470:·6e6f·6e69·6e74·6572·6163·7469·7665·2061··noninteractive·a | |||
| 0003d480:·7074·2d67·6574·2069·6e73·7461·6c6c·202d··pt-get·install·- | |||
| 0003d490:·7920·2273·7973·6c6f·672d·6e67·220a·0a65··y·"syslog-ng"..e | |||
| 0003d4a0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003d4b0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003d4c0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003d4d0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003d4e0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003d4f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003d500:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003d510:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003d520:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003d530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003d540:·6964·6d31·3037·3035·2220·7461·6269·6e64··idm10705"·tabind | |||
| 0003d550:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003d560:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003d570:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003d580:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003d590:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003d5a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003d5b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003d5c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003d5d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003d5e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003d5f0:·6964·6d31·3037·3035·223e·3c74·6162·6c65··idm10705"><table | |||
| 0003d600:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003d610:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003d620:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003d630:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003d640:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003d | 0003d4c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003d660:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003d670:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003d680:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003d690:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003d6a0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003d6b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003d | 0003d4d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003d4e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003d4f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003d500:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003d510:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003d520:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| Max diff block lines reached; 41756/58922 bytes (70.87%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:12 | 40 | ····*·cpe:/o:debian:debian_linux:12 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 276, 14 lines modified | Offset 276, 19 lines modified | ||
| 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 278 | References:················4.4.2.4 | 278 | References:················4.4.2.4 |
| 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 284 | [[packages]] | ||
| 285 | name·=·"syslog-ng" | ||
| 286 | version·=·"*" | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 288 | #·Remediation·is·applicable·only·in·certain·platforms | 292 | #·Remediation·is·applicable·only·in·certain·platforms |
| 289 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 293 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 308, 19 lines modified | Offset 313, 14 lines modified | ||
| 308 | ··-·NIST-800-53-CM-6(a) | 313 | ··-·NIST-800-53-CM-6(a) |
| 309 | ··-·enable_strategy | 314 | ··-·enable_strategy |
| 310 | ··-·low_complexity | 315 | ··-·low_complexity |
| 311 | ··-·low_disruption | 316 | ··-·low_disruption |
| 312 | ··-·medium_severity | 317 | ··-·medium_severity |
| 313 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 314 | ··-·package_syslogng_installed | 319 | ··-·package_syslogng_installed |
| 315 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 316 | [[packages]] | ||
| 317 | name·=·"syslog-ng" | ||
| 318 | version·=·"*" | ||
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 324 | include·install_syslog-ng | 325 | include·install_syslog-ng |
| Offset 348, 14 lines modified | Offset 348, 18 lines modified | ||
| 348 | ···························4.4.2.2,·4.4.2.4 | 348 | ···························4.4.2.2,·4.4.2.4 |
| 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 356 | [customizations.services] | ||
| 357 | enabled·=·["syslog-ng"] | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 360 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 363 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 361 | ··block: | 364 | ··block: |
| Offset 379, 18 lines modified | Offset 383, 14 lines modified | ||
| 379 | ··-·NIST-800-53-CM-6(a) | 383 | ··-·NIST-800-53-CM-6(a) |
| 380 | ··-·enable_strategy | 384 | ··-·enable_strategy |
| 381 | ··-·low_complexity | 385 | ··-·low_complexity |
| 382 | ··-·low_disruption | 386 | ··-·low_disruption |
| 383 | ··-·medium_severity | 387 | ··-·medium_severity |
| 384 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 385 | ··-·service_syslogng_enabled | 389 | ··-·service_syslogng_enabled |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 387 | [customizations.services] | ||
| 388 | enabled·=·["syslog-ng"] | ||
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 394 | include·enable_syslog-ng | 395 | include·enable_syslog-ng |
| Offset 417, 14 lines modified | Offset 417, 19 lines modified | ||
| 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 423 | ···························SRG-OS-000480-GPOS-00227 | 423 | ···························SRG-OS-000480-GPOS-00227 |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 425 | [[packages]] | ||
| 426 | name·=·"rsyslog" | ||
| 427 | version·=·"*" | ||
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 425 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 426 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 427 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 428 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 429 | #·Remediation·is·applicable·only·in·certain·platforms | 433 | #·Remediation·is·applicable·only·in·certain·platforms |
| 430 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 434 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 449, 19 lines modified | Offset 454, 14 lines modified | ||
| 449 | ··-·NIST-800-53-CM-6(a) | 454 | ··-·NIST-800-53-CM-6(a) |
| 450 | ··-·enable_strategy | 455 | ··-·enable_strategy |
| 451 | ··-·low_complexity | 456 | ··-·low_complexity |
| 452 | ··-·low_disruption | 457 | ··-·low_disruption |
| 453 | ··-·medium_severity | 458 | ··-·medium_severity |
| 454 | ··-·no_reboot_needed | 459 | ··-·no_reboot_needed |
| 455 | ··-·package_rsyslog_installed | 460 | ··-·package_rsyslog_installed |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 457 | [[packages]] | ||
| 458 | name·=·"rsyslog" | ||
| 459 | version·=·"*" | ||
| 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1801/7721 bytes (23.33%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 20552, 126 lines modified | Offset 20552, 126 lines modified | ||
| 00050470:·2d74·6172·6765·743d·2223·6964·6d31·3037··-target="#idm107 | 00050470:·2d74·6172·6765·743d·2223·6964·6d31·3037··-target="#idm107 | ||
| 00050480:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | 00050480:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | ||
| 00050490:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00050490:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 000504a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 000504a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000504b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000504b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000504c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000504c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000504d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000504d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000504e0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 000504 | 000504e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 000504f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00050500:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00050510:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00050520:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00050530:·6964·3d22·6964·6d31·3037·3034·223e·3c70··id="idm10704"><p | |||
| 00050540:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00050550:·6167·6573·5d5d·0a6e·616d·6520·3d20·2273··ages]].name·=·"s | |||
| 00050560:·7973·6c6f·672d·6e67·220a·7665·7273·696f··yslog-ng".versio | |||
| 00050570:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00050580:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00050590:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000505a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000505b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000505c0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | |||
| 000505d0:·3730·3522·2074·6162·696e·6465·783d·2230··705"·tabindex="0 | |||
| 000505e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 000505f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00050600:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00050610:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00050620:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00050630:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00050640:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00050 | 00050650:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00050510:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00050520:·6522·2069·643d·2269·646d·3130·3730·3422··e"·id="idm10704" | |||
| 00050530:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00050 | 00050660:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00050670:·7365·2220·6964·3d22·6964·6d31·3037·3035··se"·id="idm10705 | |||
| 00050680:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00050690:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000506a0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00050 | 000506b0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 000506c0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000506d0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000506e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000506f0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00050700:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00050710:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00050720:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00050730:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00050740:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00050750:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00050760:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00050770:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 00050780:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 00050790:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 000507a0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 000507b0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 000507c0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 000507d0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 000507e0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 000507f0:·7468·656e·0a0a·4445·4249·414e·5f46·524f··then..DEBIAN_FRO | |||
| 00050800:·4e54·454e·443d·6e6f·6e69·6e74·6572·6163··NTEND=noninterac | |||
| 00050810:·7469·7665·2061·7074·2d67·6574·2069·6e73··tive·apt-get·ins | |||
| 00050820:·7461·6c6c·202d·7920·2273·7973·6c6f·672d··tall·-y·"syslog- | |||
| 00050830:·6e67·220a·0a65·6c73·650a·2020·2020·2667··ng"..else.····&g | |||
| 00050840:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 00050850:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 00050860:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 00050870:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 00050880:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 00050890:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 000508a0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 000508b0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 000508c0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 000508d0:·6765·743d·2223·6964·6d31·3037·3036·2220··get="#idm10706"· | |||
| 000508e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 000508f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00050900:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00050910:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00050920:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00050930:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00050940:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00050950:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00050960:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00050970:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00050980:·2220·6964·3d22·6964·6d31·3037·3036·223e··"·id="idm10706"> | |||
| 00050990:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000509a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00050 | 000509b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00050570:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00050580:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00050590:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000505a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000505b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000505c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000505d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 000505e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 000505f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00050600:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00050610:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00050620:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 00050630:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 00050640:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 00050650:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 00050660:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 00050670:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 00050680:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 00050690:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 000506a0:·6865·6e0a·0a44·4542·4941·4e5f·4652·4f4e··hen..DEBIAN_FRON | |||
| 000506b0:·5445·4e44·3d6e·6f6e·696e·7465·7261·6374··TEND=noninteract | |||
| 000506c0:·6976·6520·6170·742d·6765·7420·696e·7374··ive·apt-get·inst | |||
| Max diff block lines reached; 127870/145036 bytes (88.16%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1717, 14 lines modified | Offset 1717, 19 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1719 | References:················4.4.2.4 | 1719 | References:················4.4.2.4 |
| 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [[packages]] | ||
| 1726 | name·=·"syslog-ng" | ||
| 1727 | version·=·"*" | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1729 | #·Remediation·is·applicable·only·in·certain·platforms | 1733 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1730 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1734 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1749, 19 lines modified | Offset 1754, 14 lines modified | ||
| 1749 | ··-·NIST-800-53-CM-6(a) | 1754 | ··-·NIST-800-53-CM-6(a) |
| 1750 | ··-·enable_strategy | 1755 | ··-·enable_strategy |
| 1751 | ··-·low_complexity | 1756 | ··-·low_complexity |
| 1752 | ··-·low_disruption | 1757 | ··-·low_disruption |
| 1753 | ··-·medium_severity | 1758 | ··-·medium_severity |
| 1754 | ··-·no_reboot_needed | 1759 | ··-·no_reboot_needed |
| 1755 | ··-·package_syslogng_installed | 1760 | ··-·package_syslogng_installed |
| 1756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1757 | [[packages]] | ||
| 1758 | name·=·"syslog-ng" | ||
| 1759 | version·=·"*" | ||
| 1760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1761 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1762 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1763 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1764 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1765 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1765 | include·install_syslog-ng | 1766 | include·install_syslog-ng |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ···························4.4.2.2,·4.4.2.4 | 1789 | ···························4.4.2.2,·4.4.2.4 |
| 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations.services] | ||
| 1798 | enabled·=·["syslog-ng"] | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1801 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1804 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1802 | ··block: | 1805 | ··block: |
| Offset 1820, 18 lines modified | Offset 1824, 14 lines modified | ||
| 1820 | ··-·NIST-800-53-CM-6(a) | 1824 | ··-·NIST-800-53-CM-6(a) |
| 1821 | ··-·enable_strategy | 1825 | ··-·enable_strategy |
| 1822 | ··-·low_complexity | 1826 | ··-·low_complexity |
| 1823 | ··-·low_disruption | 1827 | ··-·low_disruption |
| 1824 | ··-·medium_severity | 1828 | ··-·medium_severity |
| 1825 | ··-·no_reboot_needed | 1829 | ··-·no_reboot_needed |
| 1826 | ··-·service_syslogng_enabled | 1830 | ··-·service_syslogng_enabled |
| 1827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1828 | [customizations.services] | ||
| 1829 | enabled·=·["syslog-ng"] | ||
| 1830 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1831 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1832 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1833 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1834 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1835 | include·enable_syslog-ng | 1836 | include·enable_syslog-ng |
| Offset 1858, 14 lines modified | Offset 1858, 19 lines modified | ||
| 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1864 | ···························SRG-OS-000480-GPOS-00227 | 1864 | ···························SRG-OS-000480-GPOS-00227 |
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1866 | [[packages]] | ||
| 1867 | name·=·"rsyslog" | ||
| 1868 | version·=·"*" | ||
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1871 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1872 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1873 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1870 | #·Remediation·is·applicable·only·in·certain·platforms | 1874 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1871 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1875 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1890, 19 lines modified | Offset 1895, 14 lines modified | ||
| 1890 | ··-·NIST-800-53-CM-6(a) | 1895 | ··-·NIST-800-53-CM-6(a) |
| 1891 | ··-·enable_strategy | 1896 | ··-·enable_strategy |
| 1892 | ··-·low_complexity | 1897 | ··-·low_complexity |
| 1893 | ··-·low_disruption | 1898 | ··-·low_disruption |
| 1894 | ··-·medium_severity | 1899 | ··-·medium_severity |
| 1895 | ··-·no_reboot_needed | 1900 | ··-·no_reboot_needed |
| 1896 | ··-·package_rsyslog_installed | 1901 | ··-·package_rsyslog_installed |
| 1897 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1898 | [[packages]] | ||
| 1899 | name·=·"rsyslog" | ||
| 1900 | version·=·"*" | ||
| 1901 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9728/15668 bytes (62.09%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 19682, 126 lines modified | Offset 19682, 126 lines modified | ||
| 0004ce10:·7461·7267·6574·3d22·2369·646d·3130·3131··target="#idm1011 | 0004ce10:·7461·7267·6574·3d22·2369·646d·3130·3131··target="#idm1011 | ||
| 0004ce20:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0004ce20:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0004ce30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0004ce30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0004ce40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0004ce40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0004ce50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0004ce50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0004ce60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0004ce60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0004ce70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0004ce70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0004ce80:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0004ce90:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0004cea0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004ceb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004cec0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004ced0:·643d·2269·646d·3130·3131·3822·3e3c·7072··d="idm10118"><pr | |||
| 0004cee0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0004cef0:·6765·735d·5d0a·6e61·6d65·203d·2022·7273··ges]].name·=·"rs | |||
| 0004cf00:·7973·6c6f·6722·0a76·6572·7369·6f6e·203d··yslog".version·= | |||
| 0004cf10:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0004ce80:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0004ce90:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004cea0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004ceb0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004cec0:·2220·6964·3d22·6964·6d31·3031·3138·223e··"·id="idm10118"> | |||
| 0004ced0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0004cee0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0004cef0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0004cf00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0004cf10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0004cf20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0004cf30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004cf40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004cf50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004cf60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0004cf70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0004cf80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004cf90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0004cfa0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0004cfb0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004cfc0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0004cfd0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0004cfe0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0004cff0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0004d000:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0004d010:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0004d020:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0004d030:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0004d040:·656e·0a0a·4445·4249·414e·5f46·524f·4e54··en..DEBIAN_FRONT | |||
| 0004d050:·454e·443d·6e6f·6e69·6e74·6572·6163·7469··END=noninteracti | |||
| 0004d060:·7665·2061·7074·2d67·6574·2069·6e73·7461··ve·apt-get·insta | |||
| 0004d070:·6c6c·202d·7920·2272·7379·736c·6f67·220a··ll·-y·"rsyslog". | |||
| 0004d080:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0004d090:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0004d0a0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0004d0b0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0004d0c0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0004d0d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0004d0e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0004d0f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0004d100:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0004d110:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0004d120:·2223·6964·6d31·3031·3139·2220·7461·6269··"#idm10119"·tabi | |||
| 0004d130:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0004d140:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0004d150:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0004d160:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0004d170:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0004d180:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0004d190:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0004d1a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0004d1b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0004d1c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0004d1d0:·3d22·6964·6d31·3031·3139·223e·3c74·6162··="idm10119"><tab | |||
| 0004d1e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004d1f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004d200:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004d210:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004d220:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004d230:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004d240:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004d250:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004d260:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004d270:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004d280:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004d290:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004d2a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004d2b0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0004d2c0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004d2d0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0004d2e0:·7265·2072·7379·736c·6f67·2069·7320·696e··re·rsyslog·is·in | |||
| 0004d2f0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0004d300:·653a·0a20·2020·206e·616d·653a·2072·7379··e:.····name:·rsy | |||
| 0004d310:·736c·6f67·0a20·2020·2073·7461·7465·3a20··slog.····state:· | |||
| 0004d320:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0004d330:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004d340:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004d350:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0004d360:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0004d370:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0004d380:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0004d390:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0004d3a0:·2d36·2861·290a·2020·2d20·656e·6162·6c65··-6(a).··-·enable | |||
| 0004d3b0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0004d3c0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0004d3d0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0004d3e0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0004d3f0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0004d400:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0004d410:·6b61·6765·5f72·7379·736c·6f67·5f69·6e73··kage_rsyslog_ins | |||
| 0004d420:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0004 | 0004cf20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0004 | 0004cf30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0004 | 0004cf40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| Max diff block lines reached; 110868/128034 bytes (86.59%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1531, 14 lines modified | Offset 1531, 19 lines modified | ||
| 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1537 | ···························SRG-OS-000480-GPOS-00227 | 1537 | ···························SRG-OS-000480-GPOS-00227 |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"rsyslog" | ||
| 1541 | version·=·"*" | ||
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1543 | #·Remediation·is·applicable·only·in·certain·platforms | 1547 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1544 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1548 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1563, 19 lines modified | Offset 1568, 14 lines modified | ||
| 1563 | ··-·NIST-800-53-CM-6(a) | 1568 | ··-·NIST-800-53-CM-6(a) |
| 1564 | ··-·enable_strategy | 1569 | ··-·enable_strategy |
| 1565 | ··-·low_complexity | 1570 | ··-·low_complexity |
| 1566 | ··-·low_disruption | 1571 | ··-·low_disruption |
| 1567 | ··-·medium_severity | 1572 | ··-·medium_severity |
| 1568 | ··-·no_reboot_needed | 1573 | ··-·no_reboot_needed |
| 1569 | ··-·package_rsyslog_installed | 1574 | ··-·package_rsyslog_installed |
| 1570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1571 | [[packages]] | ||
| 1572 | name·=·"rsyslog" | ||
| 1573 | version·=·"*" | ||
| 1574 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1575 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1576 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1577 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1578 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1579 | include·install_rsyslog | 1580 | include·install_rsyslog |
| Offset 1605, 14 lines modified | Offset 1605, 18 lines modified | ||
| 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | [customizations.services] | ||
| 1614 | enabled·=·["rsyslog"] | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1620 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1618 | ··block: | 1621 | ··block: |
| Offset 1636, 18 lines modified | Offset 1640, 14 lines modified | ||
| 1636 | ··-·NIST-800-53-CM-6(a) | 1640 | ··-·NIST-800-53-CM-6(a) |
| 1637 | ··-·enable_strategy | 1641 | ··-·enable_strategy |
| 1638 | ··-·low_complexity | 1642 | ··-·low_complexity |
| 1639 | ··-·low_disruption | 1643 | ··-·low_disruption |
| 1640 | ··-·medium_severity | 1644 | ··-·medium_severity |
| 1641 | ··-·no_reboot_needed | 1645 | ··-·no_reboot_needed |
| 1642 | ··-·service_rsyslog_enabled | 1646 | ··-·service_rsyslog_enabled |
| 1643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1644 | [customizations.services] | ||
| 1645 | enabled·=·["rsyslog"] | ||
| 1646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1651 | include·enable_rsyslog | 1652 | include·enable_rsyslog |
| Offset 3345, 14 lines modified | Offset 3345, 19 lines modified | ||
| 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3347 | ···························SR·2.7,·SR·7.6 | 3347 | ···························SR·2.7,·SR·7.6 |
| 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3349 | ···························A.14.2.4,·A.9.1.2 | 3349 | ···························A.14.2.4,·A.9.1.2 |
| 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3353 | [[packages]] | ||
| 3354 | name·=·"cron" | ||
| 3355 | version·=·"*" | ||
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3357 | #·Remediation·is·applicable·only·in·certain·platforms | 3361 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3358 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3362 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3377, 19 lines modified | Offset 3382, 14 lines modified | ||
| 3377 | ··-·NIST-800-53-CM-6(a) | 3382 | ··-·NIST-800-53-CM-6(a) |
| 3378 | ··-·enable_strategy | 3383 | ··-·enable_strategy |
| 3379 | ··-·low_complexity | 3384 | ··-·low_complexity |
| 3380 | ··-·low_disruption | 3385 | ··-·low_disruption |
| 3381 | ··-·medium_severity | 3386 | ··-·medium_severity |
| 3382 | ··-·no_reboot_needed | 3387 | ··-·no_reboot_needed |
| 3383 | ··-·package_cron_installed | 3388 | ··-·package_cron_installed |
| 3384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3385 | [[packages]] | ||
| 3386 | name·=·"cron" | ||
| 3387 | version·=·"*" | ||
| 3388 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 8013/13900 bytes (57.65%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Debian·11.·It·is·a·rendering·of | 7 | configuration·settings·for·Debian·11.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 59 lines modified | Offset 72, 50 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="package_net-snmp"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_ | 84 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_s | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="machine"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_s | 95 | ····<cpe-lang:platform·id="package_systemd"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_s | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_c | 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 104 | ········</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 115 | ······<cpe-lang:logical-test·operator=" | 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 118 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="machine_and_package_sn | 110 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 124 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="x86_64_arch"> | 117 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| Offset 140, 90 lines modified | Offset 131, 99 lines modified | ||
| 140 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="package_rsh-server"> | 133 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_net-snmp"> | ||
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | ||
| 151 | ····</cpe-lang:platform> | ||
| 152 | ····<cpe-lang:platform·id="package_ | 138 | ····<cpe-lang:platform·id="package_pam"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 143 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg- | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="g | 148 | ····<cpe-lang:platform·id="package_audit"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="package_ntp"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_ | 158 | ····<cpe-lang:platform·id="package_gdm"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="package_chrony"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 183 | ····<cpe-lang:platform·id="package_logrotate"> | 168 | ····<cpe-lang:platform·id="package_logrotate"> |
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 186 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 187 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 188 | ····<cpe-lang:platform·id="package_ | 173 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 189 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 190 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 191 | ······</cpe-lang:logical-test> | 176 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 53188/66184 bytes (80.36%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·12</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·12</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Debian·12.·It·is·a·rendering·of | 7 | configuration·settings·for·Debian·12.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 256 lines modified | Offset 71, 256 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_net-snmp"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="machine"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 106 | ····<cpe-lang:platform·id="selinux"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="package_systemd"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="uefi"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_c | 121 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 125 | ········</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 137 | ······<cpe-lang:logical-test·operator=" | 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-p | 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | ||
| 140 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="machine_and_package_sn | 131 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="x86_64_arch"> | 138 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="s | 143 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | ||
| 157 | ····</cpe-lang:platform> | ||
| 158 | ····<cpe-lang:platform·id="package_libreswan"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 161 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 148 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 166 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 167 | ········</cpe-lang:logical-test> | 152 | ········</cpe-lang:logical-test> |
| 168 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 169 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 170 | ········</cpe-lang:logical-test> | 155 | ········</cpe-lang:logical-test> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id=" | 159 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> |
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 178 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 179 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 180 | ····<cpe-lang:platform·id="package_rsh-server"> | 165 | ····<cpe-lang:platform·id="package_rsh-server"> |
| Max diff block lines reached; 78121/92065 bytes (84.85%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····16516·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0····16516·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·3234 | 3 | -rw-r--r--···0········0········0·32343288·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14295, 15 lines modified | Offset 14295, 15 lines modified | ||
| 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037dd0:·2032·3032·3 | 00037dd0:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15105, 80 lines modified | Offset 15105, 80 lines modified | ||
| 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | ||
| 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b070:·6469·6174·696f·6e20·4 | 0003b070:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b080:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b090:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0c0:·2220·6964·3d22·6964·6d31·3332·3122·3e3c··"·id="idm1321">< | |||
| 0003b0d0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b0e0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0f0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b100:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b080:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003b0c0:·3332·3122·3e3c·7461·626c·6520·636c·6173··321"><table·clas | |||
| 0003b0d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b100:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b110:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b120:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b130:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b140:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b160:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b170:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b180:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b190:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b1a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1c0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1d0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1e0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1f0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b200:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b210:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b220:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b230:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b240:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b250:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b260:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b290:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b2c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b2d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b2e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b2f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b300:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b310:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b320:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b330:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b340:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b | 0003b110:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b360:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b370:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b380:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b390:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003b3a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b3b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b3e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b400:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b410:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b420:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b430:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b440:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b450:·646d·3133·3232·223e·3c70·7265·3e3c·636f··dm1322"><pre><co | |||
| 0003b460:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b470:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b | 0003b120:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b130:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b140:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b150:·7267·6574·3d22·2369·646d·3133·3232·2220··rget="#idm1322"· | |||
| 0003b160:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b170:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b180:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b190:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b1a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b1b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1c0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b1d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b200:·2220·6964·3d22·6964·6d31·3332·3222·3e3c··"·id="idm1322">< | |||
| 0003b210:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b220:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b230:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b240:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b250:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b260:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b270:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b280:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b290:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b2c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b2e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b2f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 229746/240562 bytes (95.50%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 143, 19 lines modified | Offset 148, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_aide | 160 | include·install_aide |
| Offset 761, 14 lines modified | Offset 761, 19 lines modified | ||
| 761 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 761 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 762 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 762 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 763 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 763 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 764 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 764 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 765 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 765 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 766 | ············_\x8c_\x8i_\x8s·····4.3.1 | 766 | ············_\x8c_\x8i_\x8s·····4.3.1 |
| 767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 769 | [[packages]] | ||
| 770 | name·=·"sudo" | ||
| 771 | version·=·"*" | ||
| 768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 772 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 769 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 773 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 770 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 774 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 771 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 775 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 772 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 776 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 773 | -·name:·Ensure·sudo·is·installed | 777 | -·name:·Ensure·sudo·is·installed |
| 774 | ··package: | 778 | ··package: |
| Offset 780, 19 lines modified | Offset 785, 14 lines modified | ||
| 780 | ··-·PCI-DSSv4-2.2.6 | 785 | ··-·PCI-DSSv4-2.2.6 |
| 781 | ··-·enable_strategy | 786 | ··-·enable_strategy |
| 782 | ··-·low_complexity | 787 | ··-·low_complexity |
| 783 | ··-·low_disruption | 788 | ··-·low_disruption |
| 784 | ··-·medium_severity | 789 | ··-·medium_severity |
| 785 | ··-·no_reboot_needed | 790 | ··-·no_reboot_needed |
| 786 | ··-·package_sudo_installed | 791 | ··-·package_sudo_installed |
| 787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 788 | [[packages]] | ||
| 789 | name·=·"sudo" | ||
| 790 | version·=·"*" | ||
| 791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 792 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 792 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 793 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 793 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 794 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 794 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 795 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 795 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 796 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 796 | include·install_sudo | 797 | include·install_sudo |
| Offset 9082, 14 lines modified | Offset 9082, 18 lines modified | ||
| 9082 | ············disruption·to·system·processes. | 9082 | ············disruption·to·system·processes. |
| 9083 | Severity: ··medium | 9083 | Severity: ··medium |
| 9084 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled | 9084 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled |
| 9085 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 | 9085 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 |
| 9086 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 | 9086 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 |
| 9087 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 | 9087 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 |
| 9088 | ············_\x8c_\x8i_\x8s····5.1.2.2 | 9088 | ············_\x8c_\x8i_\x8s····5.1.2.2 |
| 9089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9090 | [customizations.services] | ||
| 9091 | enabled·=·["systemd-journald"] | ||
| 9089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9090 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9093 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9091 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9094 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9092 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9095 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9093 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9096 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9094 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald | 9097 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald |
| 9095 | ··block: | 9098 | ··block: |
| Offset 9111, 18 lines modified | Offset 9115, 14 lines modified | ||
| 9111 | ··-·NIST-800-53-SC-24 | 9115 | ··-·NIST-800-53-SC-24 |
| 9112 | ··-·enable_strategy | 9116 | ··-·enable_strategy |
| 9113 | ··-·low_complexity | 9117 | ··-·low_complexity |
| 9114 | ··-·low_disruption | 9118 | ··-·low_disruption |
| 9115 | ··-·medium_severity | 9119 | ··-·medium_severity |
| 9116 | ··-·no_reboot_needed | 9120 | ··-·no_reboot_needed |
| 9117 | ··-·service_systemd-journald_enabled | 9121 | ··-·service_systemd-journald_enabled |
| 9118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9119 | [customizations.services] | ||
| 9120 | enabled·=·["systemd-journald"] | ||
| 9121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 18888/24254 bytes (77.88%) of diff not shown. | |||
| Offset 14295, 16 lines modified | Offset 14295, 16 lines modified | ||
| 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037de0:·3 | 00037de0:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15078, 80 lines modified | Offset 15078, 80 lines modified | ||
| 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | ||
| 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003aec0:·6961·7469·6f6e·204 | 0003aec0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003aed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af00:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003af10:·3231·223e·3c74·6162·6c65·2063·6c61·7373··21"><table·class | |||
| 0003af20:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003af30:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003af40:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003af50:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003af60:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003af70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af80:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003af90:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003afa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afb0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003afc0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003afd0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003afe0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003aff0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b000:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b010:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b020:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b030:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b040:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b050:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b060:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b070:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b080:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b090:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b0a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b0b0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b0c0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b0d0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b0e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b110:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b120:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b130:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b140:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b150:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003 | 0003aed0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003aee0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aef0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af10:·2069·643d·2269·646d·3133·3231·223e·3c70···id="idm1321"><p | |||
| 0003af20:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003af30:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003af40:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003af50:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003af60:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003af70:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003af80:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003af90:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003afa0:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003afb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003afc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003afd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003afe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aff0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b000:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b010:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b020:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b030:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b040:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b050:·2069·643d·2269·646d·3133·3232·223e·3c74···id="idm1322"><t | |||
| 0003b060:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b070:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b080:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b090:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b0a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b0b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b0c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b0e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b0f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b100:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b110:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b120:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b130:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b140:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b150:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b160:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b170:· | 0003b170:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | ||
| 0003b180:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b190:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b1a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1e0:·6574·3d22·2369·646d·3133·3232·2220·7461··et="#idm1322"·ta | |||
| 0003b1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b250:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| Max diff block lines reached; 131734/142688 bytes (92.32%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 19 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 135 | ··package: |
| Offset 139, 19 lines modified | Offset 144, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 146 | ··-·low_complexity |
| 142 | ··-·low_disruption | 147 | ··-·low_disruption |
| 143 | ··-·medium_severity | 148 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 156 | include·install_aide |
| Offset 661, 14 lines modified | Offset 661, 19 lines modified | ||
| 661 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 661 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 662 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 662 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 663 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 663 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 664 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 664 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 665 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 665 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 666 | ············_\x8c_\x8i_\x8s·····4.3.1 | 666 | ············_\x8c_\x8i_\x8s·····4.3.1 |
| 667 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 667 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 669 | [[packages]] | ||
| 670 | name·=·"sudo" | ||
| 671 | version·=·"*" | ||
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 669 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 670 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 671 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 672 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 673 | -·name:·Ensure·sudo·is·installed | 677 | -·name:·Ensure·sudo·is·installed |
| 674 | ··package: | 678 | ··package: |
| Offset 680, 19 lines modified | Offset 685, 14 lines modified | ||
| 680 | ··-·PCI-DSSv4-2.2.6 | 685 | ··-·PCI-DSSv4-2.2.6 |
| 681 | ··-·enable_strategy | 686 | ··-·enable_strategy |
| 682 | ··-·low_complexity | 687 | ··-·low_complexity |
| 683 | ··-·low_disruption | 688 | ··-·low_disruption |
| 684 | ··-·medium_severity | 689 | ··-·medium_severity |
| 685 | ··-·no_reboot_needed | 690 | ··-·no_reboot_needed |
| 686 | ··-·package_sudo_installed | 691 | ··-·package_sudo_installed |
| 687 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 688 | [[packages]] | ||
| 689 | name·=·"sudo" | ||
| 690 | version·=·"*" | ||
| 691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 692 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 693 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 693 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 694 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 694 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 695 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 695 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 696 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 696 | include·install_sudo | 697 | include·install_sudo |
| Offset 8982, 14 lines modified | Offset 8982, 18 lines modified | ||
| 8982 | ············disruption·to·system·processes. | 8982 | ············disruption·to·system·processes. |
| 8983 | Severity: ··medium | 8983 | Severity: ··medium |
| 8984 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled | 8984 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled |
| 8985 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 | 8985 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 |
| 8986 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 | 8986 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 |
| 8987 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 | 8987 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 |
| 8988 | ············_\x8c_\x8i_\x8s····5.1.2.2 | 8988 | ············_\x8c_\x8i_\x8s····5.1.2.2 |
| 8989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8990 | [customizations.services] | ||
| 8991 | enabled·=·["systemd-journald"] | ||
| 8989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8992 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8990 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8993 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8991 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8994 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8992 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8995 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8993 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8996 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8994 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald | 8997 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald |
| 8995 | ··block: | 8998 | ··block: |
| Offset 9011, 18 lines modified | Offset 9015, 14 lines modified | ||
| 9011 | ··-·NIST-800-53-SC-24 | 9015 | ··-·NIST-800-53-SC-24 |
| 9012 | ··-·enable_strategy | 9016 | ··-·enable_strategy |
| 9013 | ··-·low_complexity | 9017 | ··-·low_complexity |
| 9014 | ··-·low_disruption | 9018 | ··-·low_disruption |
| 9015 | ··-·medium_severity | 9019 | ··-·medium_severity |
| 9016 | ··-·no_reboot_needed | 9020 | ··-·no_reboot_needed |
| 9017 | ··-·service_systemd-journald_enabled | 9021 | ··-·service_systemd-journald_enabled |
| 9018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9019 | [customizations.services] | ||
| 9020 | enabled·=·["systemd-journald"] | ||
| 9021 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9022 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9659/15035 bytes (64.24%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15468, 80 lines modified | Offset 15468, 80 lines modified | ||
| 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | ||
| 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c720:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003c730:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c740:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c750:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c760:·2220·6964·3d22·6964·6d31·3138·3622·3e3c··"·id="idm1186">< | |||
| 0003c770:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c780:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c790:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c7a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c7b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c7c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c7d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c7e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c7f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c800:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c810:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c820:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c | 0003c720:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003c730:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003c740:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c750:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c760:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c770:·6964·6d31·3138·3622·3e3c·7072·653e·3c63··idm1186"><pre><c | |||
| 0003c780:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003c790:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003c7a0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003c7b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c7c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c7d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c7e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c7f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c800:·2369·646d·3131·3837·2220·7461·6269·6e64··#idm1187"·tabind | |||
| 0003c810:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c820:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c830:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c840:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c850:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c860:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003c870:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003c880:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c890:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c8a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c8b0:·6964·6d31·3138·3722·3e3c·7461·626c·6520··idm1187"><table· | |||
| 0003c8c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c8d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c8e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c8f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c900:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c910:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c920:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c930:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c940:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c950:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c | 0003c960:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c970:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c980:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c990:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c9a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c9b0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003c9c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003c850:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c860:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c870:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c880:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c890:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c8a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c8b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c8c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c8d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c8e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c8f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c900:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c910:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c920:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c930:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003c940:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003c950:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c960:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c970:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003c980:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003c990:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003c9a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003c9b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003c9c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003c9d0:·640a·2020· | 0003c9d0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 0003c9e0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c9f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ca00:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ca10:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ca20:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ca30:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ca40:·6964·6d31·3138·3722·2074·6162·696e·6465··idm1187"·tabinde | |||
| 0003ca50:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ca60:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ca70:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ca80:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ca90:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003caa0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003cab0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003cac0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003cad0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003cae0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003caf0:·7073·6522·2069·643d·2269·646d·3131·3837··pse"·id="idm1187 | |||
| 0003cb00:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| Max diff block lines reached; 184532/195348 bytes (94.46%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 160, 14 lines modified | Offset 160, 19 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | -·name:·Ensure·aide·is·installed | 176 | -·name:·Ensure·aide·is·installed |
| 173 | ··package: | 177 | ··package: |
| Offset 181, 19 lines modified | Offset 186, 14 lines modified | ||
| 181 | ··-·PCI-DSSv4-11.5.2 | 186 | ··-·PCI-DSSv4-11.5.2 |
| 182 | ··-·enable_strategy | 187 | ··-·enable_strategy |
| 183 | ··-·low_complexity | 188 | ··-·low_complexity |
| 184 | ··-·low_disruption | 189 | ··-·low_disruption |
| 185 | ··-·medium_severity | 190 | ··-·medium_severity |
| 186 | ··-·no_reboot_needed | 191 | ··-·no_reboot_needed |
| 187 | ··-·package_aide_installed | 192 | ··-·package_aide_installed |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | [[packages]] | ||
| 190 | name·=·"aide" | ||
| 191 | version·=·"*" | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | 198 | include·install_aide |
| Offset 4635, 14 lines modified | Offset 4635, 19 lines modified | ||
| 4635 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4635 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4636 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4636 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4637 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4637 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4638 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4638 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4639 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4639 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4640 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4640 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4641 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4641 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4643 | [[packages]] | ||
| 4644 | name·=·"logrotate" | ||
| 4645 | version·=·"*" | ||
| 4642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4647 | -·name:·Ensure·logrotate·is·installed | 4651 | -·name:·Ensure·logrotate·is·installed |
| 4648 | ··package: | 4652 | ··package: |
| Offset 4655, 19 lines modified | Offset 4660, 14 lines modified | ||
| 4655 | ··-·PCI-DSSv4-10.5.1 | 4660 | ··-·PCI-DSSv4-10.5.1 |
| 4656 | ··-·enable_strategy | 4661 | ··-·enable_strategy |
| 4657 | ··-·low_complexity | 4662 | ··-·low_complexity |
| 4658 | ··-·low_disruption | 4663 | ··-·low_disruption |
| 4659 | ··-·medium_severity | 4664 | ··-·medium_severity |
| 4660 | ··-·no_reboot_needed | 4665 | ··-·no_reboot_needed |
| 4661 | ··-·package_logrotate_installed | 4666 | ··-·package_logrotate_installed |
| 4662 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4663 | [[packages]] | ||
| 4664 | name·=·"logrotate" | ||
| 4665 | version·=·"*" | ||
| 4666 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4667 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4667 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4668 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4668 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4669 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4669 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4670 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4670 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4671 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4671 | include·install_logrotate | 4672 | include·install_logrotate |
| Offset 4782, 14 lines modified | Offset 4782, 19 lines modified | ||
| 4782 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4782 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4783 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4783 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4784 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4784 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4785 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4785 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4786 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4786 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4787 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4787 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4788 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4788 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4790 | [[packages]] | ||
| 4791 | name·=·"firewalld" | ||
| 4792 | version·=·"*" | ||
| 4789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4793 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4790 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4794 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4791 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4795 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4792 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4796 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4793 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4797 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4794 | -·name:·Ensure·firewalld·is·installed | 4798 | -·name:·Ensure·firewalld·is·installed |
| 4795 | ··package: | 4799 | ··package: |
| Offset 4801, 19 lines modified | Offset 4806, 14 lines modified | ||
| 4801 | ··-·PCI-DSSv4-1.2.1 | 4806 | ··-·PCI-DSSv4-1.2.1 |
| 4802 | ··-·enable_strategy | 4807 | ··-·enable_strategy |
| 4803 | ··-·low_complexity | 4808 | ··-·low_complexity |
| 4804 | ··-·low_disruption | 4809 | ··-·low_disruption |
| 4805 | ··-·medium_severity | 4810 | ··-·medium_severity |
| 4806 | ··-·no_reboot_needed | 4811 | ··-·no_reboot_needed |
| 4807 | ··-·package_firewalld_installed | 4812 | ··-·package_firewalld_installed |
| 4808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4809 | [[packages]] | ||
| 4810 | name·=·"firewalld" | ||
| Max diff block lines reached; 14465/20084 bytes (72.02%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 19675, 133 lines modified | Offset 19675, 133 lines modified | ||
| 0004cda0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004cda0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004cdb0:·646d·3638·3333·2220·7461·6269·6e64·6578··dm6833"·tabindex | 0004cdb0:·646d·3638·3333·2220·7461·6269·6e64·6578··dm6833"·tabindex | ||
| 0004cdc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0004cdc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004cdd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0004cdd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004cde0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0004cde0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004cdf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0004cdf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004ce00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0004ce00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004ce10:·6d65·6469·6174·696f·6e20·4 | 0004ce10:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0004ce20:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0004ce30:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004ce40:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004ce50:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004ce60:·6d36·3833·3322·3e3c·7461·626c·6520·636c··m6833"><table·cl | |||
| 0004ce70:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0004ce80:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0004ce90:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0004cea0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0004ceb0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0004cec0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004ced0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004cee0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0004cef0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004cf00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0004cf10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0004cf20:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0004c | 0004ce20:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0004ce30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004ce40:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004ce50:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004ce60:·7365·2220·6964·3d22·6964·6d36·3833·3322··se"·id="idm6833" | |||
| 0004ce70:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 0004ce80:·7374·6f6d·697a·6174·696f·6e73·2e73·6572··stomizations.ser | |||
| 0004ce90:·7669·6365·735d·0a65·6e61·626c·6564·203d··vices].enabled·= | |||
| 0004cea0:·205b·2266·6972·6577·616c·6c64·225d·0a3c···["firewalld"].< | |||
| 0004ceb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0004cec0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0004ced0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0004cee0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0004cef0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0004cf00:·2223·6964·6d36·3833·3422·2074·6162·696e··"#idm6834"·tabin | |||
| 0004cf10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0004cf20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0004cf30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0004cf40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0004cf50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0004cf60:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0004cf70:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0004cf80:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004cf90:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004cfa0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004cfb0:·2269·646d·3638·3334·223e·3c74·6162·6c65··"idm6834"><table | |||
| 0004cfc0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0004cfd0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0004cfe0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0004cff0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0004d000:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0004d010:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004d020:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004d030:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004 | 0004d040:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0004d050:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004d060:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0004d070:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0004d080:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0004d090:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0004d0a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0004d0b0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0004d0c0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0004d0d0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0004d0e0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0004d0f0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0004cf50:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0004cf60:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0004cf70:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0004cf80:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0004cf90:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0004cfa0:·746f·0a20·2074·6167·733a·0a20·202d·204e··to.··tags:.··-·N | |||
| 0004cfb0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | |||
| 0004cfc0:·330a·2020·2d20·4e49·5354·2d38·3030·2d31··3.··-·NIST-800-1 | |||
| 0004cfd0:·3731·2d33·2e34·2e37·0a20·202d·204e·4953··71-3.4.7.··-·NIS | |||
| 0004cfe0:·542d·3830·302d·3533·2d41·432d·340a·2020··T-800-53-AC-4.·· | |||
| 0004cff0:·2d20·4e49·5354·2d38·3030·2d35·332d·4341··-·NIST-800-53-CA | |||
| 0004d000:·2d33·2835·290a·2020·2d20·4e49·5354·2d38··-3(5).··-·NIST-8 | |||
| 0004d010:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0004d | 0004d100:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0004d030:·2d37·2862·290a·2020·2d20·4e49·5354·2d38··-7(b).··-·NIST-8 | |||
| 0004d040:·3030·2d35·332d·5343·2d37·2832·3129·0a20··00-53-SC-7(21).· | |||
| 0004d050:·202d·2050·4349·2d44·5353·7634·2d31·2e32···-·PCI-DSSv4-1.2 | |||
| 0004d060:·2e31·0a20·202d·2065·6e61·626c·655f·7374··.1.··-·enable_st | |||
| 0004d070:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0004d080:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004d090:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004d0a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004d0b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004d0c0:·6565·6465·640a·2020·2d20·7365·7276·6963··eeded.··-·servic | |||
| 0004d0d0:·655f·6669·7265·7761·6c6c·645f·656e·6162··e_firewalld_enab | |||
| 0004d0e0:·6c65·640a·0a2d·206e·616d·653a·2056·6572··led..-·name:·Ver | |||
| 0004d0f0:·6966·7920·6669·7265·7761·6c6c·6420·456e··ify·firewalld·En | |||
| 0004d1 | 0004d110:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | ||
| 0004d120:·302d·3137·312d·332e·342e·370a·2020·2d20··0-171-3.4.7.··-· | |||
| 0004d130:·4e49·5354·2d38·3030·2d35·332d·4143·2d34··NIST-800-53-AC-4 | |||
| 0004d140:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d150:·2d43·412d·3328·3529·0a20·202d·204e·4953··-CA-3(5).··-·NIS | |||
| 0004d160:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0004d170:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d180:·2d43·4d2d·3728·6229·0a20·202d·204e·4953··-CM-7(b).··-·NIS | |||
| 0004d190:·542d·3830·302d·3533·2d53·432d·3728·3231··T-800-53-SC-7(21 | |||
| 0004d1a0:·290a·2020·2d20·5043·492d·4453·5376·342d··).··-·PCI-DSSv4- | |||
| 0004d1b0:·312e·322e·310a·2020·2d20·656e·6162·6c65··1.2.1.··-·enable | |||
| 0004d1c0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0004d1d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 188980/207112 bytes (91.25%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1016, 14 lines modified | Offset 1016, 18 lines modified | ||
| 1016 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 1016 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 1017 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 1017 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 1018 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 1018 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 1019 | ···························SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS- | 1019 | ···························SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS- |
| 1020 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480- | 1020 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480- |
| 1021 | ···························GPOS-00232 | 1021 | ···························GPOS-00232 |
| 1022 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 1022 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 1023 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1024 | [customizations.services] | ||
| 1025 | enabled·=·["firewalld"] | ||
| 1023 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1024 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1025 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1026 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1027 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1028 | -·name:·Gather·the·package·facts | 1031 | -·name:·Gather·the·package·facts |
| 1029 | ··package_facts: | 1032 | ··package_facts: |
| Offset 1074, 18 lines modified | Offset 1078, 14 lines modified | ||
| 1074 | ··-·PCI-DSSv4-1.2.1 | 1078 | ··-·PCI-DSSv4-1.2.1 |
| 1075 | ··-·enable_strategy | 1079 | ··-·enable_strategy |
| 1076 | ··-·low_complexity | 1080 | ··-·low_complexity |
| 1077 | ··-·low_disruption | 1081 | ··-·low_disruption |
| 1078 | ··-·medium_severity | 1082 | ··-·medium_severity |
| 1079 | ··-·no_reboot_needed | 1083 | ··-·no_reboot_needed |
| 1080 | ··-·service_firewalld_enabled | 1084 | ··-·service_firewalld_enabled |
| 1081 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1082 | [customizations.services] | ||
| 1083 | enabled·=·["firewalld"] | ||
| 1084 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1085 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1085 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1086 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1086 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1087 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1087 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1088 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1088 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1089 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1089 | include·enable_firewalld | 1090 | include·enable_firewalld |
| Offset 1206, 14 lines modified | Offset 1206, 18 lines modified | ||
| 1206 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 1206 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 1207 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 1207 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 1208 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 1208 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 1209 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1209 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 1210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 1211 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- | 1211 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- |
| 1212 | ···························000480-GPOS-00227 | 1212 | ···························000480-GPOS-00227 |
| 1213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1214 | [customizations.services] | ||
| 1215 | masked·=·["autofs"] | ||
| 1213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1218 | -·name:·Gather·the·package·facts | 1221 | -·name:·Gather·the·package·facts |
| 1219 | ··package_facts: | 1222 | ··package_facts: |
| Offset 1316, 18 lines modified | Offset 1320, 14 lines modified | ||
| 1316 | ··-·NIST-800-53-MP-7 | 1320 | ··-·NIST-800-53-MP-7 |
| 1317 | ··-·disable_strategy | 1321 | ··-·disable_strategy |
| 1318 | ··-·low_complexity | 1322 | ··-·low_complexity |
| 1319 | ··-·low_disruption | 1323 | ··-·low_disruption |
| 1320 | ··-·medium_severity | 1324 | ··-·medium_severity |
| 1321 | ··-·no_reboot_needed | 1325 | ··-·no_reboot_needed |
| 1322 | ··-·service_autofs_disabled | 1326 | ··-·service_autofs_disabled |
| 1323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1324 | [customizations.services] | ||
| 1325 | masked·=·["autofs"] | ||
| 1326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1331 | include·disable_autofs | 1332 | include·disable_autofs |
| Offset 1406, 14 lines modified | Offset 1406, 18 lines modified | ||
| 1406 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1406 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1407 | ···························7.6 | 1407 | ···························7.6 |
| 1408 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1408 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1410 | ···························A.9.1.2 | 1410 | ···························A.9.1.2 |
| 1411 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1411 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1412 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1412 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1414 | [customizations.services] | ||
| 1415 | masked·=·["abrtd"] | ||
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1414 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1415 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1416 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1417 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1418 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present | 1421 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present |
| 1419 | ····in·the·System | 1422 | ····in·the·System |
| Offset 1487, 18 lines modified | Offset 1491, 14 lines modified | ||
| 1487 | ··-·NIST-800-53-CM-7(a) | 1491 | ··-·NIST-800-53-CM-7(a) |
| 1488 | ··-·disable_strategy | 1492 | ··-·disable_strategy |
| 1489 | ··-·low_complexity | 1493 | ··-·low_complexity |
| 1490 | ··-·low_disruption | 1494 | ··-·low_disruption |
| 1491 | ··-·medium_severity | 1495 | ··-·medium_severity |
| 1492 | ··-·no_reboot_needed | 1496 | ··-·no_reboot_needed |
| 1493 | ··-·service_abrtd_disabled | 1497 | ··-·service_abrtd_disabled |
| 1494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1495 | [customizations.services] | ||
| 1496 | masked·=·["abrtd"] | ||
| 1497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 8495/14460 bytes (58.75%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15826, 80 lines modified | Offset 15826, 80 lines modified | ||
| 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | ||
| 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd80:·656d·6564·6961·7469·6f6e·204 | 0003dd80:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003dd90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003dda0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ddb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ddc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ddd0:·646d·3132·3738·223e·3c74·6162·6c65·2063··dm1278"><table·c | |||
| 0003dde0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ddf0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003de00:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003de10:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003de20:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003de30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003de40:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003de50:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003de60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003de70:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003de80:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003de90:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003d | 0003dd90:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003dda0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ddb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ddc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ddd0:·7073·6522·2069·643d·2269·646d·3132·3738··pse"·id="idm1278 | |||
| 0003dde0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ddf0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003de00:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003de10:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003de20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003de30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003de40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003de50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003de60:·2d74·6172·6765·743d·2223·6964·6d31·3237··-target="#idm127 | |||
| 0003de70:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003de80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003de90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003dea0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003deb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003dec0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ded0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003dee0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003def0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003df00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003df10:·7073·6522·2069·643d·2269·646d·3132·3739··pse"·id="idm1279 | |||
| 0003df20:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003df30:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003df40:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003df50:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003df60:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003df70:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003df80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003df90:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003dfa0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003dfb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003dfc0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003d | 0003dfd0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003dfe0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003dff0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003e000:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003e010:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003e020:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003e030:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003e040:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003e050:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003e060:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003e070:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003e080:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003e090:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003e0a0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003e0b0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003e0c0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003e0d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003e0e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003e0f0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003e100:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003e110:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003e120:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003e130:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003e140:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003e150:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003e160:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003e170:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003e180:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003e190:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003dec0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ded0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003dee0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003def0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003df00:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003df10:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003df20:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003df30:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003df40:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003df50:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003df60:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003df70:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003df80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003df90:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003dfa0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003dfb0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003dfc0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003dfd0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003dfe0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003dff0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003e000:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 208842/219658 bytes (95.08%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 202, 14 lines modified | Offset 202, 19 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | [[packages]] | ||
| 211 | name·=·"aide" | ||
| 212 | version·=·"*" | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | -·name:·Ensure·aide·is·installed | 218 | -·name:·Ensure·aide·is·installed |
| 215 | ··package: | 219 | ··package: |
| Offset 223, 19 lines modified | Offset 228, 14 lines modified | ||
| 223 | ··-·PCI-DSSv4-11.5.2 | 228 | ··-·PCI-DSSv4-11.5.2 |
| 224 | ··-·enable_strategy | 229 | ··-·enable_strategy |
| 225 | ··-·low_complexity | 230 | ··-·low_complexity |
| 226 | ··-·low_disruption | 231 | ··-·low_disruption |
| 227 | ··-·medium_severity | 232 | ··-·medium_severity |
| 228 | ··-·no_reboot_needed | 233 | ··-·no_reboot_needed |
| 229 | ··-·package_aide_installed | 234 | ··-·package_aide_installed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 231 | [[packages]] | ||
| 232 | name·=·"aide" | ||
| 233 | version·=·"*" | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 239 | include·install_aide | 240 | include·install_aide |
| Offset 578, 14 lines modified | Offset 578, 19 lines modified | ||
| 578 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 578 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 579 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 579 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 580 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 580 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 581 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 581 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 582 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 582 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 583 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 583 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 584 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 584 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | [[packages]] | ||
| 587 | name·=·"sudo" | ||
| 588 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 590 | -·name:·Ensure·sudo·is·installed | 594 | -·name:·Ensure·sudo·is·installed |
| 591 | ··package: | 595 | ··package: |
| Offset 597, 19 lines modified | Offset 602, 14 lines modified | ||
| 597 | ··-·PCI-DSSv4-2.2.6 | 602 | ··-·PCI-DSSv4-2.2.6 |
| 598 | ··-·enable_strategy | 603 | ··-·enable_strategy |
| 599 | ··-·low_complexity | 604 | ··-·low_complexity |
| 600 | ··-·low_disruption | 605 | ··-·low_disruption |
| 601 | ··-·medium_severity | 606 | ··-·medium_severity |
| 602 | ··-·no_reboot_needed | 607 | ··-·no_reboot_needed |
| 603 | ··-·package_sudo_installed | 608 | ··-·package_sudo_installed |
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 605 | [[packages]] | ||
| 606 | name·=·"sudo" | ||
| 607 | version·=·"*" | ||
| 608 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 609 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 609 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 610 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 610 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 611 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 611 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 612 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 612 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 613 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 613 | include·install_sudo | 614 | include·install_sudo |
| Offset 4358, 14 lines modified | Offset 4358, 19 lines modified | ||
| 4358 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4358 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4359 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4359 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4363 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4363 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4366 | [[packages]] | ||
| 4367 | name·=·"logrotate" | ||
| 4368 | version·=·"*" | ||
| 4365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4370 | -·name:·Ensure·logrotate·is·installed | 4374 | -·name:·Ensure·logrotate·is·installed |
| 4371 | ··package: | 4375 | ··package: |
| Offset 4378, 19 lines modified | Offset 4383, 14 lines modified | ||
| 4378 | ··-·PCI-DSSv4-10.5.1 | 4383 | ··-·PCI-DSSv4-10.5.1 |
| 4379 | ··-·enable_strategy | 4384 | ··-·enable_strategy |
| 4380 | ··-·low_complexity | 4385 | ··-·low_complexity |
| 4381 | ··-·low_disruption | 4386 | ··-·low_disruption |
| 4382 | ··-·medium_severity | 4387 | ··-·medium_severity |
| 4383 | ··-·no_reboot_needed | 4388 | ··-·no_reboot_needed |
| 4384 | ··-·package_logrotate_installed | 4389 | ··-·package_logrotate_installed |
| 4385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4386 | [[packages]] | ||
| 4387 | name·=·"logrotate" | ||
| Max diff block lines reached; 15822/21321 bytes (74.21%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 19859, 237 lines modified | Offset 19859, 237 lines modified | ||
| 0004d920:·6574·3d22·2369·646d·3131·3337·3422·2074··et="#idm11374"·t | 0004d920:·6574·3d22·2369·646d·3131·3337·3422·2074··et="#idm11374"·t | ||
| 0004d930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0004d930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0004d940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0004d940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0004d950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0004d950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0004d960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0004d960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0004d970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0004d970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0004d980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0004d980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0004d990:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0004d9a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0004d9b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0004d9c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0004d9d0:·2069·643d·2269·646d·3131·3337·3422·3e3c···id="idm11374">< | |||
| 0004d9e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0004d9 | 0004d990:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0004d9a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0004d9b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0004d9c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0004d9d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0004d9e0:·646d·3131·3337·3422·3e3c·7072·653e·3c63··dm11374"><pre><c | |||
| 0004d9f0:·6f64·653e·0a5b·6375·7374·6f6d·697a·6174··ode>.[customizat | |||
| 0004da00:·696f·6e73·2e73·6572·7669·6365·735d·0a6d··ions.services].m | |||
| 0004da10:·6173·6b65·6420·3d20·5b22·6175·746f·6673··asked·=·["autofs | |||
| 0004da20:·225d·0a3c·2f63·6f64·653e·3c2f·7072·653e··"].</code></pre> | |||
| 0004da30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0004da40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0004da50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0004da60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0004da70:·6765·743d·2223·6964·6d31·3133·3735·2220··get="#idm11375"· | |||
| 0004da80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0004da90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0004daa0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0004dab0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0004dac0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0004dad0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0004dae0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0004daf0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004db00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004db10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004db20:·2220·6964·3d22·6964·6d31·3133·3735·223e··"·id="idm11375"> | |||
| 0004db30:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0004db40:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0004db50:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0004d | 0004db60:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0004da10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0004d | 0004db70:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0004da30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0004da40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004da50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004da60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004da70:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004da80:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0004da90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004daa0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0004dab0:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | |||
| 0004dac0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004dad0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0004dae0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0004d | 0004db80:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0004db90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004dba0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004dbb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004dbc0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0004dbd0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0004dbe0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004dbf0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0004dc00:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | |||
| 0004dc10:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0004dc20:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0004dc30:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0004dc40:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0004d | 0004dc50:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0004d | 0004dc60:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0004dc70:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0004dc80:·302d·3137·312d·332e·342e·360a·2020·2d20··0-171-3.4.6.··-· | |||
| 0004dc90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0004d | 0004dca0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | ||
| 0004dcb0:·2d35·332d·434d·2d37·2861·290a·2020·2d20··-53-CM-7(a).··-· | |||
| 0004dcc0:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 0004dcd0:·2862·290a·2020·2d20·4e49·5354·2d38·3030··(b).··-·NIST-800 | |||
| 0004dce0:·2d35·332d·4d50·2d37·0a20·202d·2064·6973··-53-MP-7.··-·dis | |||
| 0004dcf0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0004dd00:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0004dd10:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0004dd20:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0004dd30:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0004dd40:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0004dd50:·2073·6572·7669·6365·5f61·7574·6f66·735f···service_autofs_ | |||
| 0004dd60:·6469·7361·626c·6564·0a0a·2d20·6e61·6d65··disabled..-·name | |||
| 0004dd70:·3a20·4469·7361·626c·6520·7468·6520·4175··:·Disable·the·Au | |||
| 0004dd80:·746f·6d6f·756e·7465·7220·2d20·436f·6c6c··tomounter·-·Coll | |||
| 0004dd90:·6563·7420·7379·7374·656d·6420·5365·7276··ect·systemd·Serv | |||
| 0004dda0:·6963·6573·2050·7265·7365·6e74·2069·6e20··ices·Present·in· | |||
| 0004ddb0:·7468·6520·5379·7374·656d·0a20·2061·6e73··the·System.··ans | |||
| 0004ddc0:·6962·6c65·2e62·7569·6c74·696e·2e63·6f6d··ible.builtin.com | |||
| 0004ddd0:·6d61·6e64·3a20·7379·7374·656d·6374·6c20··mand:·systemctl· | |||
| 0004dde0:·2d71·206c·6973·742d·756e·6974·2d66·696c··-q·list-unit-fil | |||
| 0004ddf0:·6573·202d·2d74·7970·6520·7365·7276·6963··es·--type·servic | |||
| 0004de00:·650a·2020·7265·6769·7374·6572·3a20·7365··e.··register:·se | |||
| 0004de10:·7276·6963·655f·6578·6973·7473·0a20·2063··rvice_exists.··c | |||
| 0004de20:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0004de30:·7365·0a20·2066·6169·6c65·645f·7768·656e··se.··failed_when | |||
| 0004de40:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 0004de50:·2e72·6320·6e6f·7420·696e·205b·302c·2031··.rc·not·in·[0,·1 | |||
| 0004de60:·5d0a·2020·6368·6563·6b5f·6d6f·6465·3a20··].··check_mode:· | |||
| 0004de70:·6661·6c73·650a·2020·7768·656e·3a20·2820··false.··when:·(· | |||
| 0004de80:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004de90:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004dea0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0004deb0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0004dec0:·706f·646d·616e·222c·0a20·2020·2022·636f··podman",.····"co | |||
| 0004ded0:·6e74·6169·6e65·7222·5d20·616e·6420·2261··ntainer"]·and·"a | |||
| Max diff block lines reached; 157074/189558 bytes (82.86%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 970, 14 lines modified | Offset 970, 18 lines modified | ||
| 970 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 970 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 971 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 971 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 972 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 972 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 973 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 973 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 974 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 974 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 975 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- | 975 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- |
| 976 | ···························000480-GPOS-00227 | 976 | ···························000480-GPOS-00227 |
| 977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 978 | [customizations.services] | ||
| 979 | masked·=·["autofs"] | ||
| 977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 980 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 978 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 981 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 979 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 982 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 980 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 983 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 981 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 984 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 982 | -·name:·Gather·the·package·facts | 985 | -·name:·Gather·the·package·facts |
| 983 | ··package_facts: | 986 | ··package_facts: |
| Offset 1080, 18 lines modified | Offset 1084, 14 lines modified | ||
| 1080 | ··-·NIST-800-53-MP-7 | 1084 | ··-·NIST-800-53-MP-7 |
| 1081 | ··-·disable_strategy | 1085 | ··-·disable_strategy |
| 1082 | ··-·low_complexity | 1086 | ··-·low_complexity |
| 1083 | ··-·low_disruption | 1087 | ··-·low_disruption |
| 1084 | ··-·medium_severity | 1088 | ··-·medium_severity |
| 1085 | ··-·no_reboot_needed | 1089 | ··-·no_reboot_needed |
| 1086 | ··-·service_autofs_disabled | 1090 | ··-·service_autofs_disabled |
| 1087 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1088 | [customizations.services] | ||
| 1089 | masked·=·["autofs"] | ||
| 1090 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1091 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1092 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1092 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1093 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1093 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1094 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1094 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1095 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1095 | include·disable_autofs | 1096 | include·disable_autofs |
| Offset 1144, 14 lines modified | Offset 1144, 18 lines modified | ||
| 1144 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1144 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1145 | ···························7.6 | 1145 | ···························7.6 |
| 1146 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1146 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1147 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1147 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1148 | ···························A.9.1.2 | 1148 | ···························A.9.1.2 |
| 1149 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1149 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1150 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1150 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1152 | [customizations.services] | ||
| 1153 | masked·=·["abrtd"] | ||
| 1151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1156 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present | 1159 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present |
| 1157 | ····in·the·System | 1160 | ····in·the·System |
| Offset 1225, 18 lines modified | Offset 1229, 14 lines modified | ||
| 1225 | ··-·NIST-800-53-CM-7(a) | 1229 | ··-·NIST-800-53-CM-7(a) |
| 1226 | ··-·disable_strategy | 1230 | ··-·disable_strategy |
| 1227 | ··-·low_complexity | 1231 | ··-·low_complexity |
| 1228 | ··-·low_disruption | 1232 | ··-·low_disruption |
| 1229 | ··-·medium_severity | 1233 | ··-·medium_severity |
| 1230 | ··-·no_reboot_needed | 1234 | ··-·no_reboot_needed |
| 1231 | ··-·service_abrtd_disabled | 1235 | ··-·service_abrtd_disabled |
| 1232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1233 | [customizations.services] | ||
| 1234 | masked·=·["abrtd"] | ||
| 1235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1240 | include·disable_abrtd | 1241 | include·disable_abrtd |
| Offset 1273, 14 lines modified | Offset 1273, 18 lines modified | ||
| 1273 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1273 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1274 | ···························7.6 | 1274 | ···························7.6 |
| 1275 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1275 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1277 | ···························A.9.1.2 | 1277 | ···························A.9.1.2 |
| 1278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 1278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 1279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1281 | [customizations.services] | ||
| 1282 | masked·=·["ntpdate"] | ||
| 1280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1281 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1282 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1283 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1284 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1285 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the | 1288 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the |
| 1286 | ····System | 1289 | ····System |
| Offset 1358, 18 lines modified | Offset 1362, 14 lines modified | ||
| 1358 | ··-·NIST-800-53-CM-7(b) | 1362 | ··-·NIST-800-53-CM-7(b) |
| 1359 | ··-·disable_strategy | 1363 | ··-·disable_strategy |
| 1360 | ··-·low_complexity | 1364 | ··-·low_complexity |
| 1361 | ··-·low_disruption | 1365 | ··-·low_disruption |
| 1362 | ··-·low_severity | 1366 | ··-·low_severity |
| 1363 | ··-·no_reboot_needed | 1367 | ··-·no_reboot_needed |
| 1364 | ··-·service_ntpdate_disabled | 1368 | ··-·service_ntpdate_disabled |
| 1365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1366 | [customizations.services] | ||
| 1367 | masked·=·["ntpdate"] | ||
| 1368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 6856/12852 bytes (53.35%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d80:·6f66·2032·3032·3 | 00037d80:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15458, 80 lines modified | Offset 15458, 80 lines modified | ||
| 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c680:·656d·6564·6961·7469·6f6e·204 | 0003c680:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003c690:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c6a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c6b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c6c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c6d0:·646d·3133·3338·223e·3c74·6162·6c65·2063··dm1338"><table·c | |||
| 0003c6e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c6f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c700:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c710:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c720:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c730:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c740:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c750:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c770:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c780:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c790:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c | 0003c690:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003c6a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c6b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c6c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c6d0:·7073·6522·2069·643d·2269·646d·3133·3338··pse"·id="idm1338 | |||
| 0003c6e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003c6f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003c700:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003c710:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003c720:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c730:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c740:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c750:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c760:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003c770:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003c780:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c790:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c7a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c7b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c7c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c7d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003c7e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c7f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c800:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c810:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003c820:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c830:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c840:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c850:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c860:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c870:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c880:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c890:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c8a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c8b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c8c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c | 0003c8d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c8e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c8f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c900:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c910:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003c920:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003c930:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003c940:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003c950:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003c960:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003c970:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003c980:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003c990:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003c9a0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003c9b0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003c9c0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003c9d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003c9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c9f0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ca00:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ca10:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ca20:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ca30:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003ca40:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003ca50:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003ca60:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003ca70:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003ca80:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003ca90:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c7c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c7d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003c7e0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003c7f0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003c800:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003c810:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003c820:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003c830:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003c840:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003c850:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003c860:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003c870:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003c880:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c890:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003c8a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c8b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c8c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c8d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c8e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c8f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c900:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 159358/170174 bytes (93.64%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:23 | 43 | ····*·cpe:/o:anolis:anolis_os:23 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 175 | ··package: |
| Offset 179, 19 lines modified | Offset 184, 14 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 186 | ··-·low_complexity |
| 182 | ··-·low_disruption | 187 | ··-·low_disruption |
| 183 | ··-·medium_severity | 188 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | 196 | include·install_aide |
| Offset 4518, 14 lines modified | Offset 4518, 19 lines modified | ||
| 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4526 | [[packages]] | ||
| 4527 | name·=·"logrotate" | ||
| 4528 | version·=·"*" | ||
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4530 | -·name:·Ensure·logrotate·is·installed | 4534 | -·name:·Ensure·logrotate·is·installed |
| 4531 | ··package: | 4535 | ··package: |
| Offset 4538, 19 lines modified | Offset 4543, 14 lines modified | ||
| 4538 | ··-·PCI-DSSv4-10.5.1 | 4543 | ··-·PCI-DSSv4-10.5.1 |
| 4539 | ··-·enable_strategy | 4544 | ··-·enable_strategy |
| 4540 | ··-·low_complexity | 4545 | ··-·low_complexity |
| 4541 | ··-·low_disruption | 4546 | ··-·low_disruption |
| 4542 | ··-·medium_severity | 4547 | ··-·medium_severity |
| 4543 | ··-·no_reboot_needed | 4548 | ··-·no_reboot_needed |
| 4544 | ··-·package_logrotate_installed | 4549 | ··-·package_logrotate_installed |
| 4545 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4546 | [[packages]] | ||
| 4547 | name·=·"logrotate" | ||
| 4548 | version·=·"*" | ||
| 4549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4550 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4550 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4551 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4551 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4552 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4552 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4553 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4553 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4554 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4554 | include·install_logrotate | 4555 | include·install_logrotate |
| Offset 4665, 14 lines modified | Offset 4665, 19 lines modified | ||
| 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4673 | [[packages]] | ||
| 4674 | name·=·"firewalld" | ||
| 4675 | version·=·"*" | ||
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4677 | -·name:·Ensure·firewalld·is·installed | 4681 | -·name:·Ensure·firewalld·is·installed |
| 4678 | ··package: | 4682 | ··package: |
| Offset 4684, 19 lines modified | Offset 4689, 14 lines modified | ||
| 4684 | ··-·PCI-DSSv4-1.2.1 | 4689 | ··-·PCI-DSSv4-1.2.1 |
| 4685 | ··-·enable_strategy | 4690 | ··-·enable_strategy |
| 4686 | ··-·low_complexity | 4691 | ··-·low_complexity |
| 4687 | ··-·low_disruption | 4692 | ··-·low_disruption |
| 4688 | ··-·medium_severity | 4693 | ··-·medium_severity |
| 4689 | ··-·no_reboot_needed | 4694 | ··-·no_reboot_needed |
| 4690 | ··-·package_firewalld_installed | 4695 | ··-·package_firewalld_installed |
| 4691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4692 | [[packages]] | ||
| 4693 | name·=·"firewalld" | ||
| Max diff block lines reached; 11286/16887 bytes (66.83%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15049, 80 lines modified | Offset 15049, 80 lines modified | ||
| 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | ||
| 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003acf0:·6469·6174·696f·6e20·4 | 0003acf0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003ad00:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ad10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ad20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ad30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ad40:·2220·6964·3d22·6964·6d31·3333·3822·3e3c··"·id="idm1338">< | |||
| 0003ad50:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003ad60:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003ad70:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003ad80:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003ad00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003ad40:·3333·3822·3e3c·7461·626c·6520·636c·6173··338"><table·clas | |||
| 0003ad50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ad60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ad70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ad80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ad90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ada0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003adb0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003adc0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003add0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ade0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003adf0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ae00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ae10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ae20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ae30:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ae40:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003ae50:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003ae60:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003ae70:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003ae80:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003ae90:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003aea0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003aeb0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003aec0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003aed0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003aee0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003aef0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003af00:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003af10:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003af20:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003af30:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003af40:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003af50:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003af60:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003af70:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003af80:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003af90:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003afa0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003afb0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003afc0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003a | 0003ad90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003afe0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aff0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b000:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b010:·6765·743d·2223·6964·6d31·3333·3922·2074··get="#idm1339"·t | |||
| 0003b020:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b030:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b040:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b050:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b060:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b070:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b080:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b090:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b0a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b0b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b0c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b0d0:·646d·3133·3339·223e·3c70·7265·3e3c·636f··dm1339"><pre><co | |||
| 0003b0e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b0f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003 | 0003ada0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003adb0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003adc0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003add0:·7267·6574·3d22·2369·646d·3133·3339·2220··rget="#idm1339"· | |||
| 0003ade0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003adf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003ae00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ae10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003ae20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ae30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003ae40:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003ae50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ae60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ae70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ae80:·2220·6964·3d22·6964·6d31·3333·3922·3e3c··"·id="idm1339">< | |||
| 0003ae90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003aea0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003aeb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003aec0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003aed0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003aee0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003aef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003af10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003af20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003af30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003af40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003af60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003af70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 484736/495552 bytes (97.82%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:23 | 41 | ····*·cpe:/o:anolis:anolis_os:23 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 135, 19 lines modified | Offset 140, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 152 | include·install_aide |
| Offset 4856, 14 lines modified | Offset 4856, 19 lines modified | ||
| 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 4862 | ···························00227 | 4862 | ···························00227 |
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4864 | [[packages]] | ||
| 4865 | name·=·"rsyslog" | ||
| 4866 | version·=·"*" | ||
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4868 | -·name:·Ensure·rsyslog·is·installed | 4872 | -·name:·Ensure·rsyslog·is·installed |
| 4869 | ··package: | 4873 | ··package: |
| Offset 4874, 19 lines modified | Offset 4879, 14 lines modified | ||
| 4874 | ··-·NIST-800-53-CM-6(a) | 4879 | ··-·NIST-800-53-CM-6(a) |
| 4875 | ··-·enable_strategy | 4880 | ··-·enable_strategy |
| 4876 | ··-·low_complexity | 4881 | ··-·low_complexity |
| 4877 | ··-·low_disruption | 4882 | ··-·low_disruption |
| 4878 | ··-·medium_severity | 4883 | ··-·medium_severity |
| 4879 | ··-·no_reboot_needed | 4884 | ··-·no_reboot_needed |
| 4880 | ··-·package_rsyslog_installed | 4885 | ··-·package_rsyslog_installed |
| 4881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4882 | [[packages]] | ||
| 4883 | name·=·"rsyslog" | ||
| 4884 | version·=·"*" | ||
| 4885 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4886 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4887 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4888 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4889 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4890 | include·install_rsyslog | 4891 | include·install_rsyslog |
| Offset 4912, 14 lines modified | Offset 4912, 18 lines modified | ||
| 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4920 | [customizations.services] | ||
| 4921 | enabled·=·["rsyslog"] | ||
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4924 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 4927 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 4925 | ··block: | 4928 | ··block: |
| Offset 4942, 18 lines modified | Offset 4946, 14 lines modified | ||
| 4942 | ··-·NIST-800-53-CM-6(a) | 4946 | ··-·NIST-800-53-CM-6(a) |
| 4943 | ··-·enable_strategy | 4947 | ··-·enable_strategy |
| 4944 | ··-·low_complexity | 4948 | ··-·low_complexity |
| 4945 | ··-·low_disruption | 4949 | ··-·low_disruption |
| 4946 | ··-·medium_severity | 4950 | ··-·medium_severity |
| 4947 | ··-·no_reboot_needed | 4951 | ··-·no_reboot_needed |
| 4948 | ··-·service_rsyslog_enabled | 4952 | ··-·service_rsyslog_enabled |
| 4949 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4950 | [customizations.services] | ||
| 4951 | enabled·=·["rsyslog"] | ||
| 4952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 34863/40809 bytes (85.43%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d70:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d70:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d80:·2d3 | 00037d80:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15457, 81 lines modified | Offset 15457, 81 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c680:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c690:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c6a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c6b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c6c0:·643d·2269·646d·3133·3338·223e·3c74·6162··d="idm1338"><tab | |||
| 0003c6d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c6e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c6f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c700:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c710:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c720:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c730:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c740:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c750:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c760:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c770:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c780:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c | 0003c680:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003c690:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c6a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c6b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c6c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c6d0:·3133·3338·223e·3c70·7265·3e3c·636f·6465··1338"><pre><code | |||
| 0003c6e0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003c6f0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003c700:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003c710:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c720:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c730:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c740:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c750:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c760:·6d31·3333·3922·2074·6162·696e·6465·783d··m1339"·tabindex= | |||
| 0003c770:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c780:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c790:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c7a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c7b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c7c0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003c7d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c7e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c7f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c800:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c810:·3133·3339·223e·3c74·6162·6c65·2063·6c61··1339"><table·cla | |||
| 0003c820:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c830:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c840:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c850:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c860:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c870:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c880:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c890:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c8a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c8b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c | 0003c8c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003c8d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c8e0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c8f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c900:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003c910:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003c920:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003c930:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003c940:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003c950:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003c960:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003c970:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003c980:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003c990:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003c9a0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003c9b0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003c9c0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003c9d0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003c9e0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c9f0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003ca00:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ca10:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c7b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c7c0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003c7d0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003c7e0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003c7f0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003c800:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003c810:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003c820:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003c830:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003c840:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003c850:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003c860:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003c870:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c880:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003c890:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c8a0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c8b0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c8c0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c8d0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c8e0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c8f0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c900:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c | 0003ca20:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003ca30:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ca40:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ca50:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ca60:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| Max diff block lines reached; 159220/170312 bytes (93.49%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:8 | 43 | ····*·cpe:/o:anolis:anolis_os:8 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 175 | ··package: |
| Offset 179, 19 lines modified | Offset 184, 14 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 186 | ··-·low_complexity |
| 182 | ··-·low_disruption | 187 | ··-·low_disruption |
| 183 | ··-·medium_severity | 188 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | 196 | include·install_aide |
| Offset 4518, 14 lines modified | Offset 4518, 19 lines modified | ||
| 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4526 | [[packages]] | ||
| 4527 | name·=·"logrotate" | ||
| 4528 | version·=·"*" | ||
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4530 | -·name:·Ensure·logrotate·is·installed | 4534 | -·name:·Ensure·logrotate·is·installed |
| 4531 | ··package: | 4535 | ··package: |
| Offset 4538, 19 lines modified | Offset 4543, 14 lines modified | ||
| 4538 | ··-·PCI-DSSv4-10.5.1 | 4543 | ··-·PCI-DSSv4-10.5.1 |
| 4539 | ··-·enable_strategy | 4544 | ··-·enable_strategy |
| 4540 | ··-·low_complexity | 4545 | ··-·low_complexity |
| 4541 | ··-·low_disruption | 4546 | ··-·low_disruption |
| 4542 | ··-·medium_severity | 4547 | ··-·medium_severity |
| 4543 | ··-·no_reboot_needed | 4548 | ··-·no_reboot_needed |
| 4544 | ··-·package_logrotate_installed | 4549 | ··-·package_logrotate_installed |
| 4545 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4546 | [[packages]] | ||
| 4547 | name·=·"logrotate" | ||
| 4548 | version·=·"*" | ||
| 4549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4550 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4550 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4551 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4551 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4552 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4552 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4553 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4553 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4554 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4554 | include·install_logrotate | 4555 | include·install_logrotate |
| Offset 4665, 14 lines modified | Offset 4665, 19 lines modified | ||
| 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4673 | [[packages]] | ||
| 4674 | name·=·"firewalld" | ||
| 4675 | version·=·"*" | ||
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4677 | -·name:·Ensure·firewalld·is·installed | 4681 | -·name:·Ensure·firewalld·is·installed |
| 4678 | ··package: | 4682 | ··package: |
| Offset 4684, 19 lines modified | Offset 4689, 14 lines modified | ||
| 4684 | ··-·PCI-DSSv4-1.2.1 | 4689 | ··-·PCI-DSSv4-1.2.1 |
| 4685 | ··-·enable_strategy | 4690 | ··-·enable_strategy |
| 4686 | ··-·low_complexity | 4691 | ··-·low_complexity |
| 4687 | ··-·low_disruption | 4692 | ··-·low_disruption |
| 4688 | ··-·medium_severity | 4693 | ··-·medium_severity |
| 4689 | ··-·no_reboot_needed | 4694 | ··-·no_reboot_needed |
| 4690 | ··-·package_firewalld_installed | 4695 | ··-·package_firewalld_installed |
| 4691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4692 | [[packages]] | ||
| 4693 | name·=·"firewalld" | ||
| Max diff block lines reached; 11286/16885 bytes (66.84%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037cf0:·323 | 00037cf0:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 80 lines modified | Offset 15048, 80 lines modified | ||
| 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ace0:·656d·6564·6961·7469·6f6e·204 | 0003ace0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003acf0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad30:·646d·3133·3338·223e·3c74·6162·6c65·2063··dm1338"><table·c | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003adb0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003adc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a | 0003acf0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003ad00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ad10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad30:·7073·6522·2069·643d·2269·646d·3133·3338··pse"·id="idm1338 | |||
| 0003ad40:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad50:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad60:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ad70:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ad80:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad90:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ada0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003adb0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003adc0:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003add0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003ade0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003adf0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ae00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ae10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ae20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ae30:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003ae40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae70:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003ae80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003aea0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003aeb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003aec0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003aed0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003aee0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aef0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af00:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003af20:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a | 0003af30:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003af40:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003af50:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003af60:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003af70:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af80:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af90:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003afa0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003afb0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003afc0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003afd0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003afe0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003aff0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b000:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b010:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b020:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b030:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b040:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b050:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b060:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b070:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b080:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b090:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b0a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b0b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b0c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b0d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b0e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b0f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003ae20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae30:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003ae40:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003ae50:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003ae60:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003ae70:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003ae80:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003ae90:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003aea0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003aeb0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003aec0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003aed0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aee0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003aef0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003af00:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af10:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af20:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003af30:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003af40:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003af50:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003af60:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 485012/495828 bytes (97.82%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:8 | 41 | ····*·cpe:/o:anolis:anolis_os:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 135, 19 lines modified | Offset 140, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 152 | include·install_aide |
| Offset 4856, 14 lines modified | Offset 4856, 19 lines modified | ||
| 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 4862 | ···························00227 | 4862 | ···························00227 |
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4864 | [[packages]] | ||
| 4865 | name·=·"rsyslog" | ||
| 4866 | version·=·"*" | ||
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4868 | -·name:·Ensure·rsyslog·is·installed | 4872 | -·name:·Ensure·rsyslog·is·installed |
| 4869 | ··package: | 4873 | ··package: |
| Offset 4874, 19 lines modified | Offset 4879, 14 lines modified | ||
| 4874 | ··-·NIST-800-53-CM-6(a) | 4879 | ··-·NIST-800-53-CM-6(a) |
| 4875 | ··-·enable_strategy | 4880 | ··-·enable_strategy |
| 4876 | ··-·low_complexity | 4881 | ··-·low_complexity |
| 4877 | ··-·low_disruption | 4882 | ··-·low_disruption |
| 4878 | ··-·medium_severity | 4883 | ··-·medium_severity |
| 4879 | ··-·no_reboot_needed | 4884 | ··-·no_reboot_needed |
| 4880 | ··-·package_rsyslog_installed | 4885 | ··-·package_rsyslog_installed |
| 4881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4882 | [[packages]] | ||
| 4883 | name·=·"rsyslog" | ||
| 4884 | version·=·"*" | ||
| 4885 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4886 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4887 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4888 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4889 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4890 | include·install_rsyslog | 4891 | include·install_rsyslog |
| Offset 4912, 14 lines modified | Offset 4912, 18 lines modified | ||
| 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4920 | [customizations.services] | ||
| 4921 | enabled·=·["rsyslog"] | ||
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4924 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 4927 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 4925 | ··block: | 4928 | ··block: |
| Offset 4942, 18 lines modified | Offset 4946, 14 lines modified | ||
| 4942 | ··-·NIST-800-53-CM-6(a) | 4946 | ··-·NIST-800-53-CM-6(a) |
| 4943 | ··-·enable_strategy | 4947 | ··-·enable_strategy |
| 4944 | ··-·low_complexity | 4948 | ··-·low_complexity |
| 4945 | ··-·low_disruption | 4949 | ··-·low_disruption |
| 4946 | ··-·medium_severity | 4950 | ··-·medium_severity |
| 4947 | ··-·no_reboot_needed | 4951 | ··-·no_reboot_needed |
| 4948 | ··-·service_rsyslog_enabled | 4952 | ··-·service_rsyslog_enabled |
| 4949 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4950 | [customizations.services] | ||
| 4951 | enabled·=·["rsyslog"] | ||
| 4952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 34863/40807 bytes (85.43%) of diff not shown. | |||
| Offset 14565, 15 lines modified | Offset 14565, 15 lines modified | ||
| 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038eb0:·3230·323 | 00038eb0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15321, 236 lines modified | Offset 15321, 236 lines modified | ||
| 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bdf0:·656d·6564·6961·7469·6f6e·20 | 0003bdf0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003be00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003be10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003be20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003be30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003be40:·7073·6522·2069·643d·2269·646d·3830·3032··pse"·id="idm8002 | |||
| 0003be50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003be60:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003be70:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003be80:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003be90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bea0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003beb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bec0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bed0:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 0003bee0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003bef0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bf00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bf10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bf20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bf30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bf40:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b | 0003bf50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003bf60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003bf70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003bf80:·2220·6964·3d22·6964·6d38·3030·3322·3e3c··"·id="idm8003">< | ||
| 0003b | 0003bf90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003bfa0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003bfb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b | 0003bfc0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003bfd0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003bfe0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003bea0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003beb0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bec0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bed0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bee0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b | 0003bff0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c000:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c010:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c020:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c030:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c040:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003 | 0003c050:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003 | 0003c060:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003 | 0003c070:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003bf30:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003bf40:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003bf50:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003 | 0003c080:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003c090:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003c0a0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003c0b0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003c0c0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003c0d0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003c0e0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003c0f0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003c100:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003c110:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003c120:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 0003c130:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003c140:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003c150:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003c160:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003c170:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003c180:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003c190:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c1a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b | 0003c1b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003bf80:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bf90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003 | 0003c1c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003c1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c1e0:·743d·2223·6964·6d38·3030·3422·2074·6162··t="#idm8004"·tab | |||
| 0003 | 0003c1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003 | 0003c200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003 | 0003c210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003 | 0003c220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003 | 0003c230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c000:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003c010:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c | 0003c240:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003c250:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c260:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c270:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c | 0003c280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003c040:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c050:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c060:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c070:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c | 0003c290:·643d·2269·646d·3830·3034·223e·3c74·6162··d="idm8004"><tab | ||
| 0003c2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c | 0003c300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c | 0003c310:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003c | 0003c320:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003c330:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c340:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c360:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| Max diff block lines reached; 2732190/2764536 bytes (98.83%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 87 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 88 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 88 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 131, 21 lines modified | Offset 131, 19 lines modified | ||
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 134 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ············_\x8c_\x8i_\x8s············5.3.1 | 135 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package | 139 | [[packages]] |
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 175, 38 lines modified | Offset 173, 40 lines modified | ||
| 175 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 176 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 177 | ··-·low_complexity | 175 | ··-·low_complexity |
| 178 | ··-·low_disruption | 176 | ··-·low_disruption |
| 179 | ··-·medium_severity | 177 | ··-·medium_severity |
| 180 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 181 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·--add=aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | [[packages]] | ||
| 190 | name·=·"aide" | ||
| 191 | version·=·"*" | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | 185 | include·install_aide |
| 198 | class·install_aide·{ | 186 | class·install_aide·{ |
| 199 | ··package·{·'aide': | 187 | ··package·{·'aide': |
| 200 | ····ensure·=>·'installed', | 188 | ····ensure·=>·'installed', |
| 201 | ··} | 189 | ··} |
| 202 | } | 190 | } |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·install·aide | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 202 | package·--add=aide | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 204 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 205 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 208 | To·initiate·a·manual·check,·run·the·following·command: | 208 | To·initiate·a·manual·check,·run·the·following·command: |
| 209 | $·sudo·/usr/sbin/aide·--check | 209 | $·sudo·/usr/sbin/aide·--check |
| Offset 330, 26 lines modified | Offset 330, 26 lines modified | ||
| 330 | If·a·system·has·already·been·installed,·and·the·default·partitioning·scheme·was·used,·it·is·possible·but·nontrivial·to·modify·it·to·create·separate·logical·volumes·for·the·directories·listed·above.·The·Logical·Volume·Manager·(LVM)·makes·this·possible. | 330 | If·a·system·has·already·been·installed,·and·the·default·partitioning·scheme·was·used,·it·is·possible·but·nontrivial·to·modify·it·to·create·separate·logical·volumes·for·the·directories·listed·above.·The·Logical·Volume·Manager·(LVM)·makes·this·possible. |
| 331 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 331 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 332 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. | 332 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. |
| 333 | Rationale:··The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. | 333 | Rationale:··The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. |
| 334 | Severity: ··medium | 334 | Severity: ··medium |
| 335 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_boot | 335 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_boot |
| 336 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 336 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 338 | [[customizations.filesystem]] | ||
| 339 | mountpoint·=·"/boot" | ||
| 340 | size·=·1073741824 | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 342 | part·/boot | 346 | part·/boot |
| 343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 344 | [[customizations.filesystem]] | ||
| 345 | mountpoint·=·"/boot" | ||
| 346 | size·=·1073741824 | ||
| 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 348 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 348 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 349 | Rationale:··Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 349 | Rationale:··Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 350 | Severity: ··low | 350 | Severity: ··low |
| 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_home | 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_home |
| 352 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 | 352 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 |
| 353 | ············_\x8c_\x8o_\x8b_\x8i_\x8t_\x85·········APO13.01,·DSS05.02 | 353 | ············_\x8c_\x8o_\x8b_\x8i_\x8t_\x85·········APO13.01,·DSS05.02 |
| Offset 358, 92 lines modified | Offset 358, 92 lines modified | ||
| 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| Max diff block lines reached; 222470/229609 bytes (96.89%) of diff not shown. | |||
| Offset 14564, 15 lines modified | Offset 14564, 15 lines modified | ||
| 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ea0:·3230·323 | 00038ea0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15326, 236 lines modified | Offset 15326, 236 lines modified | ||
| 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | ||
| 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003be40:·223e·5265·6d65·6469·6174·696f·6e20· | 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003be50:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003be60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003be70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003be80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003be90:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bea0:·3030·3222·3e3c·7072·653e·3c63·6f64·653e··002"><pre><code> | |||
| 0003beb0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003bec0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003bed0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003bee0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bef0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bf00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bf10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bf20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bf30:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003bf40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bf50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf90:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b | 0003bfa0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003bfb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003bfc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003bfd0:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | ||
| 0003b | 0003bfe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003bff0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003 | 0003c000:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003 | 0003c010:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003 | 0003c020:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003 | 0003c030:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003 | 0003c040:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003 | 0003c050:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003 | 0003c060:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003 | 0003c070:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003 | 0003c080:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003 | 0003c090:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003 | 0003c0a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003 | 0003c0b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003 | 0003c0c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003bf80:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003bf90:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003bfa0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bfb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bfc0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bfd0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bfe0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bff0:·3d22·2369·646d·3830·3033·2220·7461·6269··="#idm8003"·tabi | |||
| 0003c000:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c010:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c020:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c030:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c0 | 0003c0d0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003c0e0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003c0f0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003c100:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003c110:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003c120:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003c130:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003c140:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003c150:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003c160:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003c170:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003c180:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003c190:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003c1a0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003c | 0003c1b0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003c060:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003c070:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c080:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c090:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c0a0:·646d·3830·3033·223e·3c74·6162·6c65·2063··dm8003"><table·c | |||
| 0003c0b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c0c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c0d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c0e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c | 0003c1c0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003c1d0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003c1e0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003c1f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c200:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c210:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c220:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c230:·7267·6574·3d22·2369·646d·3830·3034·2220··rget="#idm8004"· | |||
| 0003c240:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c250:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c260:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c270:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c280:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c290:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c2a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003c2b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c2c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c2d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c2e0:·2220·6964·3d22·6964·6d38·3030·3422·3e3c··"·id="idm8004">< | |||
| 0003c2f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c300:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c310:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c320:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c330:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c340:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c350:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c360:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| Max diff block lines reached; 2825452/2857798 bytes (98.87%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 132, 21 lines modified | Offset 132, 19 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package | 140 | [[packages]] |
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 148 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 38 lines modified | Offset 174, 40 lines modified | ||
| 176 | ··-·PCI-DSSv4-11.5.2 | 174 | ··-·PCI-DSSv4-11.5.2 |
| 177 | ··-·enable_strategy | 175 | ··-·enable_strategy |
| 178 | ··-·low_complexity | 176 | ··-·low_complexity |
| 179 | ··-·low_disruption | 177 | ··-·low_disruption |
| 180 | ··-·medium_severity | 178 | ··-·medium_severity |
| 181 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 182 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | include·install_aide | 186 | include·install_aide |
| 199 | class·install_aide·{ | 187 | class·install_aide·{ |
| 200 | ··package·{·'aide': | 188 | ··package·{·'aide': |
| 201 | ····ensure·=>·'installed', | 189 | ····ensure·=>·'installed', |
| 202 | ··} | 190 | ··} |
| 203 | } | 191 | } |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·install·aide | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·--add=aide | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 209 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 210 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 808, 26 lines modified | Offset 808, 26 lines modified | ||
| 808 | If·a·system·has·already·been·installed,·and·the·default·partitioning·scheme·was·used,·it·is·possible·but·nontrivial·to·modify·it·to·create·separate·logical·volumes·for·the·directories·listed·above.·The·Logical·Volume·Manager·(LVM)·makes·this·possible. | 808 | If·a·system·has·already·been·installed,·and·the·default·partitioning·scheme·was·used,·it·is·possible·but·nontrivial·to·modify·it·to·create·separate·logical·volumes·for·the·directories·listed·above.·The·Logical·Volume·Manager·(LVM)·makes·this·possible. |
| 809 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 809 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 810 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. | 810 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. |
| 811 | Rationale:··The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. | 811 | Rationale:··The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. |
| 812 | Severity: ··medium | 812 | Severity: ··medium |
| 813 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_boot | 813 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_boot |
| 814 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 814 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 815 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 816 | [[customizations.filesystem]] | ||
| 817 | mountpoint·=·"/boot" | ||
| 818 | size·=·1073741824 | ||
| 815 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 816 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 820 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 817 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 821 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 818 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 822 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 819 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 823 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 820 | part·/boot | 824 | part·/boot |
| 821 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 822 | [[customizations.filesystem]] | ||
| 823 | mountpoint·=·"/boot" | ||
| 824 | size·=·1073741824 | ||
| 825 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 825 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 826 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 826 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 827 | Rationale:··Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 827 | Rationale:··Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 828 | Severity: ··low | 828 | Severity: ··low |
| 829 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_home | 829 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_home |
| 830 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 | 830 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 |
| 831 | ············_\x8c_\x8o_\x8b_\x8i_\x8t_\x85·········APO13.01,·DSS05.02 | 831 | ············_\x8c_\x8o_\x8b_\x8i_\x8t_\x85·········APO13.01,·DSS05.02 |
| Offset 836, 92 lines modified | Offset 836, 92 lines modified | ||
| 836 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 836 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| Max diff block lines reached; 230940/238034 bytes (97.02%) of diff not shown. | |||
| Offset 14566, 15 lines modified | Offset 14566, 15 lines modified | ||
| 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ec0:·3230·323 | 00038ec0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15317, 235 lines modified | Offset 15317, 235 lines modified | ||
| 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003bdb0:·6469·6174·696f·6e20· | 0003bdb0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003bdc0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003bdd0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bde0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bdf0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003be00:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003be10:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003be20:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003be30:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003be40:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003be50:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003be60:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003be70:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003be80:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003be90:·7267·6574·3d22·2369·646d·3830·3033·2220··rget="#idm8003"· | |||
| 0003bea0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003beb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bec0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bed0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bee0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bef0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bf00:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b | 0003bf10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003bf20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003bf30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003bf40:·643d·2269·646d·3830·3033·223e·3c74·6162··d="idm8003"><tab | ||
| 0003b | 0003bf50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003bf60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003bf70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003bf80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003bf90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003bfa0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003bfb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003bfc0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b | 0003bfd0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003bfe0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003bff0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003 | 0003c000:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003 | 0003c010:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003 | 0003c020:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003 | 0003c030:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003bef0:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 0003 | 0003c040:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003c050:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003c060:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003c070:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003c080:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003c090:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003c0a0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003c0b0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003c0c0:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003c0d0:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003c0e0:·6e0a·2020·2020·7975·6d20·696e·7374·616c··n.····yum·instal | |||
| 0003c0f0:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003c100:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003c110:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003c120:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003c130:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003c140:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003 | 0003c150:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003 | 0003c160:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003bf30:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003 | 0003c170:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003c180:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003 | 0003c190:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003 | 0003c1a0:·2369·646d·3830·3034·2220·7461·6269·6e64··#idm8004"·tabind | ||
| 0003b | 0003c1b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bf80:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003 | 0003c1c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003c1d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003 | 0003c1e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003 | 0003c1f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bfc0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003bfd0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bfe0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bff0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c000:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c010:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c020:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c030:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c040:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c | 0003c200:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003c210:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003c220:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c230:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c240:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c250:·6964·6d38·3030·3422·3e3c·7461·626c·6520··idm8004"><table· | |||
| 0003c260:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c270:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c280:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c290:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c2a0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c2b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c2c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c | 0003c2d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c2e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003c080:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c | 0003c2f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003c300:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c | 0003c310:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003c | 0003c320:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003c0c0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c0d0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c0e0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| Max diff block lines reached; 1572348/1604556 bytes (97.99%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 147, 21 lines modified | Offset 147, 19 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package | 155 | [[packages]] |
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 191, 38 lines modified | Offset 189, 40 lines modified | ||
| 191 | ··-·PCI-DSSv4-11.5.2 | 189 | ··-·PCI-DSSv4-11.5.2 |
| 192 | ··-·enable_strategy | 190 | ··-·enable_strategy |
| 193 | ··-·low_complexity | 191 | ··-·low_complexity |
| 194 | ··-·low_disruption | 192 | ··-·low_disruption |
| 195 | ··-·medium_severity | 193 | ··-·medium_severity |
| 196 | ··-·no_reboot_needed | 194 | ··-·no_reboot_needed |
| 197 | ··-·package_aide_installed | 195 | ··-·package_aide_installed |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·--add=aide | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | [[packages]] | ||
| 206 | name·=·"aide" | ||
| 207 | version·=·"*" | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 213 | include·install_aide | 201 | include·install_aide |
| 214 | class·install_aide·{ | 202 | class·install_aide·{ |
| 215 | ··package·{·'aide': | 203 | ··package·{·'aide': |
| 216 | ····ensure·=>·'installed', | 204 | ····ensure·=>·'installed', |
| 217 | ··} | 205 | ··} |
| 218 | } | 206 | } |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | package·install·aide | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 218 | package·--add=aide | ||
| 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 220 | Run·the·following·command·to·generate·a·new·database: | 220 | Run·the·following·command·to·generate·a·new·database: |
| 221 | $·sudo·/usr/sbin/aide·--init | 221 | $·sudo·/usr/sbin/aide·--init |
| 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 223 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 223 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 224 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 224 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 225 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 225 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 366, 26 lines modified | Offset 366, 26 lines modified | ||
| 366 | apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be | 366 | apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be |
| 367 | configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. | 367 | configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. |
| 368 | Rationale:··The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition | 368 | Rationale:··The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition |
| 369 | ············should·be·restricted. | 369 | ············should·be·restricted. |
| 370 | Severity: ··medium | 370 | Severity: ··medium |
| 371 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_boot | 371 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_boot |
| 372 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 372 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 374 | [[customizations.filesystem]] | ||
| 375 | mountpoint·=·"/boot" | ||
| 376 | size·=·1073741824 | ||
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 378 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 379 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 380 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 381 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 378 | part·/boot | 382 | part·/boot |
| 379 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 380 | [[customizations.filesystem]] | ||
| 381 | mountpoint·=·"/boot" | ||
| 382 | size·=·1073741824 | ||
| 383 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 383 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 384 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at | 384 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at |
| 385 | installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such | 385 | installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such |
| 386 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the | 386 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the |
| 387 | mountpoint·can·instead·be·configured·later. | 387 | mountpoint·can·instead·be·configured·later. |
| 388 | ············Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more | 388 | ············Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more |
| 389 | Rationale:··restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill | 389 | Rationale:··restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill |
| Offset 400, 102 lines modified | Offset 400, 102 lines modified | ||
| 400 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 400 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| Max diff block lines reached; 146801/153070 bytes (95.90%) of diff not shown. | |||
| Offset 14564, 16 lines modified | Offset 14564, 16 lines modified | ||
| 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038ea0:·2020·2020·2028·6173·206f·6620·3230·323 | 00038ea0:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00038eb0:·2d3 | 00038eb0:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 14984, 217 lines modified | Offset 14984, 217 lines modified | ||
| 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | ||
| 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a8e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003a8f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003a8e0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003a8f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a900:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a910:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a920:·3d22·6964·6d31·3332·3138·223e·3c74·6162··="idm13218"><tab | |||
| 0003a930:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a940:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a950:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a960:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a970:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a980:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a990:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a9a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a9b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a9c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a9d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a9e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a9f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003aa00:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003aa10:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003aa20:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 0003aa30:·7461·6c6c·2064·6e66·2d61·7574·6f6d·6174··tall·dnf-automat | |||
| 0003aa40:·6963·0a3c·2f63·6f64·653e·3c2f·7072·653e··ic.</code></pre> | |||
| 0003aa50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aa60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aa70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003aa80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003aa90:·6765·743d·2223·6964·6d31·3332·3139·2220··get="#idm13219"· | |||
| 0003aaa0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003aab0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003aac0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003aad0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003aae0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003aaf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003ab00:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003a | 0003a900:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003a | 0003a910:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003a | 0003a920:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003a | 0003a930:·2069·643d·2269·646d·3133·3231·3822·3e3c···id="idm13218">< | ||
| 0003ab50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ab60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ab70:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ab80:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ab90:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003aba0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003abb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003abc0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003abd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003abe0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003abf0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ac00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a | 0003a940:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | ||
| 0003a950:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003a960:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 0003a970:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003a980:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a990:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a9a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a9b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a9c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a9d0:·6964·6d31·3332·3139·2220·7461·6269·6e64··idm13219"·tabind | |||
| 0003a9e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003a9f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003aa00:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003aa10:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003aa20:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003aa30:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003aa40:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003aa50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003aa60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003aa70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003aa80:·3133·3231·3922·3e3c·7461·626c·6520·636c··13219"><table·cl | |||
| 0003aa90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aaa0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003aab0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003aac0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003aad0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003aae0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003aaf0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ab00:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ab10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ab20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003a | 0003ab30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003ac30:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ac40:·636f·6465·3e0a·6966·2021·2072·706d·202d··code>.if·!·rpm·- | |||
| 0003ac50:·7120·2d2d·7175·6965·7420·2264·6e66·2d61··q·--quiet·"dnf-a | |||
| 0003ac60:·7574·6f6d·6174·6963·2220·3b20·7468·656e··utomatic"·;·then | |||
| 0003a | 0003ab40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003ab50:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ab60:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ab70:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003ab80:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003a | 0003ab90:·6965·7420·2264·6e66·2d61·7574·6f6d·6174··iet·"dnf-automat | ||
| 0003aba0:·6963·2220·3b20·7468·656e·0a20·2020·2079··ic"·;·then.····y | |||
| 0003abb0:·756d·2069·6e73·7461·6c6c·202d·7920·2264··um·install·-y·"d | |||
| 0003abc0:·6e66·2d61·7574·6f6d·6174·6963·220a·6669··nf-automatic".fi | |||
| 0003abd0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003abe0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003abf0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ac00:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| Max diff block lines reached; 369790/399652 bytes (92.53%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 21 lines modified | Offset 111, 19 lines modified | ||
| 111 | $·sudo·yum·install·dnf-automatic | 111 | $·sudo·yum·install·dnf-automatic |
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package | 119 | [[packages]] |
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 127 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 143, 38 lines modified | Offset 141, 40 lines modified | ||
| 143 | ··tags: | 141 | ··tags: |
| 144 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 143 | ··-·low_complexity |
| 146 | ··-·low_disruption | 144 | ··-·low_disruption |
| 147 | ··-·medium_severity | 145 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 149 | ··-·package_dnf-automatic_installed | 147 | ··-·package_dnf-automatic_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=dnf-automatic | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"dnf-automatic" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | include·install_dnf-automatic | 153 | include·install_dnf-automatic |
| 166 | class·install_dnf-automatic·{ | 154 | class·install_dnf-automatic·{ |
| 167 | ··package·{·'dnf-automatic': | 155 | ··package·{·'dnf-automatic': |
| 168 | ····ensure·=>·'installed', | 156 | ····ensure·=>·'installed', |
| 169 | ··} | 157 | ··} |
| 170 | } | 158 | } |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·install·dnf-automatic | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=dnf-automatic | ||
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 174 | automatic.conf. | 174 | automatic.conf. |
| 175 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 175 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 176 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 176 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 177 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 177 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9491, 21 lines modified | Offset 9491, 14 lines modified | ||
| 9491 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9491 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9492 | ···························A.9.1.2 | 9492 | ···························A.9.1.2 |
| 9493 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9493 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9494 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9494 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9495 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9495 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9496 | ············_\x8c_\x8i_\x8s············2.2.3 | 9496 | ············_\x8c_\x8i_\x8s············2.2.3 |
| 9497 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9497 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9503 | package·remove·dhcp-server | ||
| 9504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9509 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server | 9503 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server |
| Offset 9535, 33 lines modified | Offset 9528, 40 lines modified | ||
| 9535 | ··-·PCI-DSSv4-2.2.4 | 9528 | ··-·PCI-DSSv4-2.2.4 |
| 9536 | ··-·disable_strategy | 9529 | ··-·disable_strategy |
| 9537 | ··-·low_complexity | 9530 | ··-·low_complexity |
| 9538 | ··-·low_disruption | 9531 | ··-·low_disruption |
| 9539 | ··-·medium_severity | 9532 | ··-·medium_severity |
| 9540 | ··-·no_reboot_needed | 9533 | ··-·no_reboot_needed |
| 9541 | ··-·package_dhcp_removed | 9534 | ··-·package_dhcp_removed |
| 9542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 34882/40601 bytes (85.91%) of diff not shown. | |||
| Offset 14547, 16 lines modified | Offset 14547, 16 lines modified | ||
| 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038d90:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038d90:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00038da0:·3 | 00038da0:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15367, 235 lines modified | Offset 15367, 235 lines modified | ||
| 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c0d0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003c0e0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c0d0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003c0e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c0f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c100:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c110:·3d22·6964·6d38·3030·3222·3e3c·7461·626c··="idm8002"><tabl | |||
| 0003c120:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c130:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c140:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c150:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c160:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c170:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c180:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c190:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c1a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c1b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c1c0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c1d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c1e0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c1f0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c200:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c210:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003c220:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003c230:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c240:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c250:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c260:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c270:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c280:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c290:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c2a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c2b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c2c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c2d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c2e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003c2f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c300:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c310:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c320:·7365·2220·6964·3d22·6964·6d38·3030·3322··se"·id="idm8003" | |||
| 0003c330:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c340:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c350:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c360:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c370:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c380:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c390:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c3a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c3b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c3c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c3d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c3e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c3f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c400:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c410:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c420:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003c430:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003c440:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003c450:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003c460:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003c470:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003c480:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003c490:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003c4a0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003c4b0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003c4c0:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 0003c4d0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003c4e0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003c4f0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003c500:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003c510:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003c520:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003c530:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003c540:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c550:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c560:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c570:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c580:·6765·743d·2223·6964·6d38·3030·3422·2074··get="#idm8004"·t | |||
| 0003c590:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c5a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c5b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c5c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c5d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c5e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c5f0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c | 0003c0f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003c | 0003c100:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003c | 0003c110:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003c | 0003c120:·2069·643d·2269·646d·3830·3032·223e·3c70···id="idm8002"><p | ||
| 0003c640:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c650:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c660:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c670:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c680:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c690:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c6a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c6b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c6c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c6d0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c6e0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c6f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c700:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c710:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| Max diff block lines reached; 4233540/4265886 bytes (99.24%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 21 lines modified | Offset 138, 19 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package | 146 | [[packages]] |
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 38 lines modified | Offset 180, 40 lines modified | ||
| 182 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 183 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 184 | ··-·low_complexity | 182 | ··-·low_complexity |
| 185 | ··-·low_disruption | 183 | ··-·low_disruption |
| 186 | ··-·medium_severity | 184 | ··-·medium_severity |
| 187 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 188 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | [[packages]] | ||
| 197 | name·=·"aide" | ||
| 198 | version·=·"*" | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | include·install_aide | 192 | include·install_aide |
| 205 | class·install_aide·{ | 193 | class·install_aide·{ |
| 206 | ··package·{·'aide': | 194 | ··package·{·'aide': |
| 207 | ····ensure·=>·'installed', | 195 | ····ensure·=>·'installed', |
| 208 | ··} | 196 | ··} |
| 209 | } | 197 | } |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·install·aide | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | package·--add=aide | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 211 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 212 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 215 | To·initiate·a·manual·check,·run·the·following·command: | 215 | To·initiate·a·manual·check,·run·the·following·command: |
| 216 | $·sudo·/usr/sbin/aide·--check | 216 | $·sudo·/usr/sbin/aide·--check |
| Offset 696, 39 lines modified | Offset 696, 14 lines modified | ||
| 696 | » echo·"to·see·what·package·to·(re)install"·>&2 | 696 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 697 | » false··#·end·with·an·error·code | 697 | » false··#·end·with·an·error·code |
| 698 | elif·test·"$rc"·!=·0;·then | 698 | elif·test·"$rc"·!=·0;·then |
| 699 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 699 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 700 | » false··#·end·with·an·error·code | 700 | » false··#·end·with·an·error·code |
| 701 | fi | 701 | fi |
| 702 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 703 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 704 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 705 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 706 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 707 | --- | ||
| 708 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 709 | kind:·MachineConfig | ||
| 710 | spec: | ||
| 711 | ··config: | ||
| 712 | ····ignition: | ||
| 713 | ······version:·3.1.0 | ||
| 714 | ····systemd: | ||
| 715 | ······units: | ||
| 716 | ········-·name:·configure-crypto-policy.service | ||
| 717 | ··········enabled:·true | ||
| 718 | ··········contents:·| | ||
| 719 | ············[Unit] | ||
| 720 | ············Before=kubelet.service | ||
| 721 | ············[Service] | ||
| 722 | ············Type=oneshot | ||
| 723 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 724 | ············RemainAfterExit=yes | ||
| 725 | ············[Install] | ||
| 726 | ············WantedBy=multi-user.target | ||
| 727 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 702 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 393677/399266 bytes (98.60%) of diff not shown. | |||
| Offset 14548, 15 lines modified | Offset 14548, 15 lines modified | ||
| 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038da0:·7320·6f66·2032·3032·3 | 00038da0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15336, 235 lines modified | Offset 15336, 235 lines modified | ||
| 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | ||
| 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bee0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bef0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bf00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bf10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bf20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bf30:·6964·6d38·3030·3222·3e3c·7072·653e·3c63··idm8002"><pre><c | |||
| 0003bf40:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003bf50:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bf60:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bf70:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bf80:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bf90:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bfa0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bfb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bfc0:·2369·646d·3830·3033·2220·7461·6269·6e64··#idm8003"·tabind | |||
| 0003bfd0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bfe0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bff0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c000:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c010:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c020:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003 | 0003c030:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003 | 0003c040:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003 | 0003c050:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003 | 0003c060:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003 | 0003c070:·3830·3033·223e·3c74·6162·6c65·2063·6c61··8003"><table·cla | ||
| 0003 | 0003c080:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003 | 0003c090:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003 | 0003c0a0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003 | 0003c0b0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003 | 0003c0c0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003 | 0003c0d0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003 | 0003c0e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003 | 0003c0f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003 | 0003c100:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003c110:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003 | 0003c120:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003 | 0003c130:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003 | 0003c140:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003c | 0003c150:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003c | 0003c160:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0003c020:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 0003c | 0003c170:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003c180:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003c190:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003c1a0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003c1b0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003c1c0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003c1d0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003c1e0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003c1f0:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003c200:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003c210:·7975·6d20·696e·7374·616c·6c20·2d79·2022··yum·install·-y·" | |||
| 0003c220:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003c230:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003c240:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003c250:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003c260:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003c270:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003c0 | 0003c280:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003c | 0003c290:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003c06 | 0003c2a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003c070:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c080:·7267·6574·3d22·2369·646d·3830·3033·2220··rget="#idm8003"· | |||
| 0003c090:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c0a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c0b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c0c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c0d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c0e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c0f0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003c100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c | 0003c2b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003c130:·643d·2269·646d·3830·3033·223e·3c74·6162··d="idm8003"><tab | |||
| 0003c140:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c150:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c160:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c170:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c | 0003c2c0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003c2d0:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | |||
| 0003c2e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c2f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c300:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c310:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c320:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c330:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003c340:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c350:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c360:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c370:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 0003c380:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003c390:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c3a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c3b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c3c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c3d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c3e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c3f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c | 0003c400:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c1a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c1b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c1c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c1d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| Max diff block lines reached; 2328923/2361131 bytes (98.64%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 21 lines modified | Offset 133, 19 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package | 141 | [[packages]] |
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 149 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 177, 38 lines modified | Offset 175, 40 lines modified | ||
| 177 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 178 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 179 | ··-·low_complexity | 177 | ··-·low_complexity |
| 180 | ··-·low_disruption | 178 | ··-·low_disruption |
| 181 | ··-·medium_severity | 179 | ··-·medium_severity |
| 182 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 183 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | [[packages]] | ||
| 192 | name·=·"aide" | ||
| 193 | version·=·"*" | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | include·install_aide | 187 | include·install_aide |
| 200 | class·install_aide·{ | 188 | class·install_aide·{ |
| 201 | ··package·{·'aide': | 189 | ··package·{·'aide': |
| 202 | ····ensure·=>·'installed', | 190 | ····ensure·=>·'installed', |
| 203 | ··} | 191 | ··} |
| 204 | } | 192 | } |
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | package·install·aide | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 204 | package·--add=aide | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 691, 39 lines modified | Offset 691, 14 lines modified | ||
| 691 | » echo·"to·see·what·package·to·(re)install"·>&2 | 691 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 692 | » false··#·end·with·an·error·code | 692 | » false··#·end·with·an·error·code |
| 693 | elif·test·"$rc"·!=·0;·then | 693 | elif·test·"$rc"·!=·0;·then |
| 694 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 694 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 695 | » false··#·end·with·an·error·code | 695 | » false··#·end·with·an·error·code |
| 696 | fi | 696 | fi |
| 697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 698 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 699 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 700 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 701 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 702 | --- | ||
| 703 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 704 | kind:·MachineConfig | ||
| 705 | spec: | ||
| 706 | ··config: | ||
| 707 | ····ignition: | ||
| 708 | ······version:·3.1.0 | ||
| 709 | ····systemd: | ||
| 710 | ······units: | ||
| 711 | ········-·name:·configure-crypto-policy.service | ||
| 712 | ··········enabled:·true | ||
| 713 | ··········contents:·| | ||
| 714 | ············[Unit] | ||
| 715 | ············Before=kubelet.service | ||
| 716 | ············[Service] | ||
| 717 | ············Type=oneshot | ||
| 718 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 719 | ············RemainAfterExit=yes | ||
| 720 | ············[Install] | ||
| 721 | ············WantedBy=multi-user.target | ||
| 722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 256210/261799 bytes (97.87%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00038dc0:·2d32·3 | 00038dc0:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15327, 235 lines modified | Offset 15327, 235 lines modified | ||
| 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003be50:·6469·6174·696f·6e20· | 0003be50:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003be60:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003be70:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003be80:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003be90:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bea0:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003beb0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003bec0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003bed0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003be60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003be70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003be80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003be90:·643d·2269·646d·3830·3032·223e·3c74·6162··d="idm8002"><tab | |||
| 0003bea0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003beb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bec0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bed0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bee0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bef0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bf00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bf10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bf20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bf30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bf40:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003bf50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003bf60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bf70:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bf80:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bf90:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 0003bfa0:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 0003bfb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bfc0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bfd0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bfe0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c000:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003c010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c060:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003c070:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003c080:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c090:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c0a0:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c0b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c0c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c0d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c0e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c0f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c100:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c110:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c120:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c130:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c140:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c150:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c160:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c170:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c180:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c190:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c1a0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003c1b0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003c1c0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003c1d0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003c1e0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003c1f0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003c200:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003c210:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003c220:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003c230:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003c240:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003c250:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003c260:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003c270:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003c280:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003c290:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003c2a0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003 | 0003bee0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003 | 0003bef0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003 | 0003bf00:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003 | 0003bf10:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003 | 0003bf20:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003 | 0003bf30:·7267·6574·3d22·2369·646d·3830·3033·2220··rget="#idm8003"· | ||
| 0003bf40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bf50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bf60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bf70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bf80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bf90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bfa0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bfb0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bfc0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bfd0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bfe0:·643d·2269·646d·3830·3033·223e·3c74·6162··d="idm8003"><tab | |||
| 0003bff0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c000:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c010:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c020:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c030:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c040:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c050:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c060:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| Max diff block lines reached; 2063054/2095400 bytes (98.46%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 132, 21 lines modified | Offset 132, 19 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package | 140 | [[packages]] |
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 148 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 38 lines modified | Offset 174, 40 lines modified | ||
| 176 | ··-·PCI-DSSv4-11.5.2 | 174 | ··-·PCI-DSSv4-11.5.2 |
| 177 | ··-·enable_strategy | 175 | ··-·enable_strategy |
| 178 | ··-·low_complexity | 176 | ··-·low_complexity |
| 179 | ··-·low_disruption | 177 | ··-·low_disruption |
| 180 | ··-·medium_severity | 178 | ··-·medium_severity |
| 181 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 182 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | include·install_aide | 186 | include·install_aide |
| 199 | class·install_aide·{ | 187 | class·install_aide·{ |
| 200 | ··package·{·'aide': | 188 | ··package·{·'aide': |
| 201 | ····ensure·=>·'installed', | 189 | ····ensure·=>·'installed', |
| 202 | ··} | 190 | ··} |
| 203 | } | 191 | } |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·install·aide | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·--add=aide | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 209 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 210 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 690, 39 lines modified | Offset 690, 14 lines modified | ||
| 690 | » echo·"to·see·what·package·to·(re)install"·>&2 | 690 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 691 | » false··#·end·with·an·error·code | 691 | » false··#·end·with·an·error·code |
| 692 | elif·test·"$rc"·!=·0;·then | 692 | elif·test·"$rc"·!=·0;·then |
| 693 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 693 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 694 | » false··#·end·with·an·error·code | 694 | » false··#·end·with·an·error·code |
| 695 | fi | 695 | fi |
| 696 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 697 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 698 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 699 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 700 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 701 | --- | ||
| 702 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 703 | kind:·MachineConfig | ||
| 704 | spec: | ||
| 705 | ··config: | ||
| 706 | ····ignition: | ||
| 707 | ······version:·3.1.0 | ||
| 708 | ····systemd: | ||
| 709 | ······units: | ||
| 710 | ········-·name:·configure-crypto-policy.service | ||
| 711 | ··········enabled:·true | ||
| 712 | ··········contents:·| | ||
| 713 | ············[Unit] | ||
| 714 | ············Before=kubelet.service | ||
| 715 | ············[Service] | ||
| 716 | ············Type=oneshot | ||
| 717 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 718 | ············RemainAfterExit=yes | ||
| 719 | ············[Install] | ||
| 720 | ············WantedBy=multi-user.target | ||
| 721 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 696 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 231617/237206 bytes (97.64%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00038dc0:·2d32·3 | 00038dc0:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15359, 235 lines modified | Offset 15359, 235 lines modified | ||
| 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c050:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c060:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c070:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c080:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c090:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c0a0:·646d·3830·3032·223e·3c70·7265·3e3c·636f··dm8002"><pre><co | |||
| 0003c0b0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003c0c0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003c0d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003c050:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c060:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c070:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c080:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c090:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003c0a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c0b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c0c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c0d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c0e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c0f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c100:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c110:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c120:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c130:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c140:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c150:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c160:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c170:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c180:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003c190:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003c1a0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003c1b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c1c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c1d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c1e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c1f0:·6765·743d·2223·6964·6d38·3030·3322·2074··get="#idm8003"·t | |||
| 0003c200:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c210:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c220:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c230:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c240:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c250:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c260:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003c270:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c280:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c290:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c2a0:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c2b0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c2c0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c2d0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c2e0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c2f0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c300:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c310:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c320:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c330:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c340:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c350:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c360:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c370:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c380:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c390:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c3a0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003c3b0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003c3c0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003c3d0:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003c3e0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003c3f0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003c400:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003c410:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003c420:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003c430:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003c440:·0a20·2020·2079·756d·2069·6e73·7461·6c6c··.····yum·install | |||
| 0003c450:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003c460:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003c470:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003c480:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003c490:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003c4a0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003c | 0003c0e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003c | 0003c0f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003c | 0003c100:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003c | 0003c110:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003c | 0003c120:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c | 0003c130:·6964·6d38·3030·3322·2074·6162·696e·6465··idm8003"·tabinde | ||
| 0003c | 0003c140:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c | 0003c150:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c | 0003c160:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c | 0003c170:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c | 0003c180:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c | 0003c190:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003c1a0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c1b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c1c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c1d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c1e0:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c1f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c200:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c210:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c220:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c230:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c570:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c580:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| Max diff block lines reached; 4087209/4119555 bytes (99.21%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 137, 21 lines modified | Offset 137, 19 lines modified | ||
| 137 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 137 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 139 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 140 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 140 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 141 | ············_\x8c_\x8i_\x8s············5.3.1 | 141 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 143 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 143 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package | 145 | [[packages]] |
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 38 lines modified | Offset 179, 40 lines modified | ||
| 181 | ··-·PCI-DSSv4-11.5.2 | 179 | ··-·PCI-DSSv4-11.5.2 |
| 182 | ··-·enable_strategy | 180 | ··-·enable_strategy |
| 183 | ··-·low_complexity | 181 | ··-·low_complexity |
| 184 | ··-·low_disruption | 182 | ··-·low_disruption |
| 185 | ··-·medium_severity | 183 | ··-·medium_severity |
| 186 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 187 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [[packages]] | ||
| 196 | name·=·"aide" | ||
| 197 | version·=·"*" | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | include·install_aide | 191 | include·install_aide |
| 204 | class·install_aide·{ | 192 | class·install_aide·{ |
| 205 | ··package·{·'aide': | 193 | ··package·{·'aide': |
| 206 | ····ensure·=>·'installed', | 194 | ····ensure·=>·'installed', |
| 207 | ··} | 195 | ··} |
| 208 | } | 196 | } |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 202 | package·install·aide | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | Run·the·following·command·to·generate·a·new·database: | 210 | Run·the·following·command·to·generate·a·new·database: |
| 211 | $·sudo·/usr/sbin/aide·--init | 211 | $·sudo·/usr/sbin/aide·--init |
| 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 214 | To·initiate·a·manual·check,·run·the·following·command: | 214 | To·initiate·a·manual·check,·run·the·following·command: |
| 215 | $·sudo·/usr/sbin/aide·--check | 215 | $·sudo·/usr/sbin/aide·--check |
| Offset 695, 39 lines modified | Offset 695, 14 lines modified | ||
| 695 | » echo·"to·see·what·package·to·(re)install"·>&2 | 695 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 696 | » false··#·end·with·an·error·code | 696 | » false··#·end·with·an·error·code |
| 697 | elif·test·"$rc"·!=·0;·then | 697 | elif·test·"$rc"·!=·0;·then |
| 698 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 698 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 699 | » false··#·end·with·an·error·code | 699 | » false··#·end·with·an·error·code |
| 700 | fi | 700 | fi |
| 701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 702 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 703 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 704 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 705 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 706 | --- | ||
| 707 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 708 | kind:·MachineConfig | ||
| 709 | spec: | ||
| 710 | ··config: | ||
| 711 | ····ignition: | ||
| 712 | ······version:·3.1.0 | ||
| 713 | ····systemd: | ||
| 714 | ······units: | ||
| 715 | ········-·name:·configure-crypto-policy.service | ||
| 716 | ··········enabled:·true | ||
| 717 | ··········contents:·| | ||
| 718 | ············[Unit] | ||
| 719 | ············Before=kubelet.service | ||
| 720 | ············[Service] | ||
| 721 | ············Type=oneshot | ||
| 722 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 723 | ············RemainAfterExit=yes | ||
| 724 | ············[Install] | ||
| 725 | ············WantedBy=multi-user.target | ||
| 726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 378800/384389 bytes (98.55%) of diff not shown. | |||
| Offset 14583, 15 lines modified | Offset 14583, 15 lines modified | ||
| 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038fd0:·3 | 00038fd0:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | ||
| 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c040:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c050:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c060:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c070:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c080:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c090:·2269·646d·3830·3032·223e·3c70·7265·3e3c··"idm8002"><pre>< | |||
| 0003c0a0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003c0b0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c0c0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c040:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003c050:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c060:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c070:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c080:·6d38·3030·3222·3e3c·7461·626c·6520·636c··m8002"><table·cl | |||
| 0003c090:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c0a0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c0b0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c0c0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c0d0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c0e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c0f0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003c100:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c110:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c120:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003c130:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c140:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c150:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003c160:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c170:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003c180:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003c190:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003c1a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c1b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c1c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c1d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c1e0:·6172·6765·743d·2223·6964·6d38·3030·3322··arget="#idm8003" | |||
| 0003c1f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c200:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c210:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c220:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c230:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c240:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c250:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003c260:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c270:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c280:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c290:·6964·3d22·6964·6d38·3030·3322·3e3c·7461··id="idm8003"><ta | |||
| 0003c2a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c2b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c2c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c2d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c2e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c2f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c300:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c310:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c320:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c330:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c340:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c350:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c360:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c370:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c380:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c390:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003c3a0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003c3b0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003c3c0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003c3d0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003c3e0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003c3f0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003c400:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003c410:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003c420:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003c430:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| 0003c440:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003c450:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003c460:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003c470:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003c480:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003c490:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003c | 0003c0d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003c | 0003c0e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003c | 0003c0f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c | 0003c100:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003c | 0003c110:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c | 0003c120:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | ||
| 0003c | 0003c130:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c | 0003c140:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c | 0003c150:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c | 0003c160:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c | 0003c170:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c | 0003c180:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003c560:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c570:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c580:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c590:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c5a0:·2269·646d·3830·3034·223e·3c74·6162·6c65··"idm8004"><table | |||
| 0003c5b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c5c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c5d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c5e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c5f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c600:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c610:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c | 0003c190:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| Max diff block lines reached; 3601943/3634151 bytes (99.11%) of diff not shown. | |||
| Offset 79, 15 lines modified | Offset 79, 15 lines modified | ||
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 82 | ····*·cpe:/o:redhat:enterprise_linux:8 | 82 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 83 | ····*·cpe:/o:centos:centos:8 | 83 | ····*·cpe:/o:centos:centos:8 |
| 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 138, 21 lines modified | Offset 138, 19 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package | 146 | [[packages]] |
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 38 lines modified | Offset 180, 40 lines modified | ||
| 182 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 183 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 184 | ··-·low_complexity | 182 | ··-·low_complexity |
| 185 | ··-·low_disruption | 183 | ··-·low_disruption |
| 186 | ··-·medium_severity | 184 | ··-·medium_severity |
| 187 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 188 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | [[packages]] | ||
| 197 | name·=·"aide" | ||
| 198 | version·=·"*" | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | include·install_aide | 192 | include·install_aide |
| 205 | class·install_aide·{ | 193 | class·install_aide·{ |
| 206 | ··package·{·'aide': | 194 | ··package·{·'aide': |
| 207 | ····ensure·=>·'installed', | 195 | ····ensure·=>·'installed', |
| 208 | ··} | 196 | ··} |
| 209 | } | 197 | } |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·install·aide | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | package·--add=aide | ||
| 210 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 210 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 211 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 211 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 212 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 212 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 213 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 213 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 330, 14 lines modified | Offset 330, 18 lines modified | ||
| 330 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 330 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 331 | ············_\x8i_\x8s_\x8m······1446 | 331 | ············_\x8i_\x8s_\x8m······1446 |
| 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 333 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 333 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 334 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 334 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 336 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 336 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 338 | [customizations] | ||
| 339 | fips·=·true | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 338 | #·Remediation·is·applicable·only·in·certain·platforms | 341 | #·Remediation·is·applicable·only·in·certain·platforms |
| 339 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 342 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 340 | var_system_crypto_policy='FIPS' | 343 | var_system_crypto_policy='FIPS' |
| Offset 464, 18 lines modified | Offset 468, 14 lines modified | ||
| 464 | ··-·NIST-800-53-SC-13 | 468 | ··-·NIST-800-53-SC-13 |
| 465 | ··-·enable_fips_mode | 469 | ··-·enable_fips_mode |
| 466 | ··-·high_severity | 470 | ··-·high_severity |
| 467 | ··-·medium_complexity | 471 | ··-·medium_complexity |
| 468 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 469 | ··-·reboot_required | 473 | ··-·reboot_required |
| 470 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 472 | [customizations] | ||
| 473 | fips·=·true | ||
| 474 | Group ·System·Cryptographic·Policies· Group·contains·8·rules | 475 | Group ·System·Cryptographic·Policies· Group·contains·8·rules |
| 475 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 476 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 476 | ····*·GnuTLS·library | 477 | ····*·GnuTLS·library |
| Max diff block lines reached; 440187/447157 bytes (98.44%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2028·6173·206f·6620·3230·323 | 00038db0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00038dc0:·323 | 00038dc0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17484, 180 lines modified | Offset 17484, 180 lines modified | ||
| 000444b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 000444b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 000444c0:·3837·3538·2220·7461·6269·6e64·6578·3d22··8758"·tabindex=" | 000444c0:·3837·3538·2220·7461·6269·6e64·6578·3d22··8758"·tabindex=" | ||
| 000444d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000444d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000444e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000444e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 000444f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 000444f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00044500:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00044500:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00044510:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00044510:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00044520:·6469·6174·696f·6e20·4 | 00044520:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00044530:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00044540:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00044550:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00044560:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00044570:·3735·3822·3e3c·7461·626c·6520·636c·6173··758"><table·clas | |||
| 00044580:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00044590:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000445a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000445b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000445c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00044530:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00044540:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00044550:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00044560:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00044570:·646d·3837·3538·223e·3c74·6162·6c65·2063··dm8758"><table·c | |||
| 00044580:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00044590:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000445a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000445b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000445c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000445d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000445e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 000445f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00044 | 000445d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00044610:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00044 | 000445e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 000445f0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00044600:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00044610:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00044620:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00044630:· | 00044630:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00044640:· | 00044640:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 00044650:· | 00044650:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 00044660:· | 00044660:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 00044670:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 00044680:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 00044690:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 000446a0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 000446b0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 000446c0:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 000446d0:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 000446e0:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 000446f0:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 00044700:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 00044710:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 00044720:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 00044730:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00044740:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 00044750:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 00044760:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 00044770:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 00044780:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 00044790:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 000447a0:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 000447b0:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 000447c0:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 000447d0:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 000447e0:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 000447f0:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 00044800:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 00044810:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 00044820:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 00044830:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 00044840:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 00044850:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 00044860:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 00044870:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 00044880:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00044890:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000448a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000448b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000448c0:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | |||
| 000448d0:·3539·2220·7461·6269·6e64·6578·3d22·3022··59"·tabindex="0" | |||
| 000448e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000448f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00044900:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00044910:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00044920:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00044930:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00044940:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00044950:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00044960:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00044970:·6170·7365·2220·6964·3d22·6964·6d38·3735··apse"·id="idm875 | |||
| 00044980:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 00044990:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000449a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000449b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 000449c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 000449d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 000449e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000449f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00044a00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00044a10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00044a20:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00044a30:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00044a40:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00044a50:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 00044a60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00044a70:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00044 | 00044670:·206e·616d·653a·2058·4343·4446·2056·616c···name:·XCCDF·Val | ||
| 00044 | 00044680:·7565·2076·6172·5f73·7973·7465·6d5f·6372··ue·var_system_cr | ||
| 00044 | 00044690:·7970·746f·5f70·6f6c·6963·7920·2320·7072··ypto_policy·#·pr | ||
| Max diff block lines reached; 1892494/1917250 bytes (98.71%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 603, 39 lines modified | Offset 603, 14 lines modified | ||
| 603 | » echo·"to·see·what·package·to·(re)install"·>&2 | 603 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 604 | » false··#·end·with·an·error·code | 604 | » false··#·end·with·an·error·code |
| 605 | elif·test·"$rc"·!=·0;·then | 605 | elif·test·"$rc"·!=·0;·then |
| 606 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 606 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 607 | » false··#·end·with·an·error·code | 607 | » false··#·end·with·an·error·code |
| 608 | fi | 608 | fi |
| 609 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 610 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 611 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 612 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 613 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 614 | --- | ||
| 615 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 616 | kind:·MachineConfig | ||
| 617 | spec: | ||
| 618 | ··config: | ||
| 619 | ····ignition: | ||
| 620 | ······version:·3.1.0 | ||
| 621 | ····systemd: | ||
| 622 | ······units: | ||
| 623 | ········-·name:·configure-crypto-policy.service | ||
| 624 | ··········enabled:·true | ||
| 625 | ··········contents:·| | ||
| 626 | ············[Unit] | ||
| 627 | ············Before=kubelet.service | ||
| 628 | ············[Service] | ||
| 629 | ············Type=oneshot | ||
| 630 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 631 | ············RemainAfterExit=yes | ||
| 632 | ············[Install] | ||
| 633 | ············WantedBy=multi-user.target | ||
| 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 609 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 610 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 611 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 612 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 613 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 639 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 614 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 640 | ··set_fact: | 615 | ··set_fact: |
| Offset 680, 14 lines modified | Offset 655, 39 lines modified | ||
| 680 | ··-·PCI-DSSv4-2.2.7 | 655 | ··-·PCI-DSSv4-2.2.7 |
| 681 | ··-·configure_crypto_policy | 656 | ··-·configure_crypto_policy |
| 682 | ··-·high_severity | 657 | ··-·high_severity |
| 683 | ··-·low_complexity | 658 | ··-·low_complexity |
| 684 | ··-·low_disruption | 659 | ··-·low_disruption |
| 685 | ··-·no_reboot_needed | 660 | ··-·no_reboot_needed |
| 686 | ··-·restrict_strategy | 661 | ··-·restrict_strategy |
| 662 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 663 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 664 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 665 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 666 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 667 | --- | ||
| 668 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 669 | kind:·MachineConfig | ||
| 670 | spec: | ||
| 671 | ··config: | ||
| 672 | ····ignition: | ||
| 673 | ······version:·3.1.0 | ||
| 674 | ····systemd: | ||
| 675 | ······units: | ||
| 676 | ········-·name:·configure-crypto-policy.service | ||
| 677 | ··········enabled:·true | ||
| 678 | ··········contents:·| | ||
| 679 | ············[Unit] | ||
| 680 | ············Before=kubelet.service | ||
| 681 | ············[Service] | ||
| 682 | ············Type=oneshot | ||
| 683 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 684 | ············RemainAfterExit=yes | ||
| 685 | ············[Install] | ||
| 686 | ············WantedBy=multi-user.target | ||
| 687 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 687 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 688 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 688 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 689 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 689 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 690 | Severity: ··medium | 690 | Severity: ··medium |
| 691 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 691 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 692 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 692 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 693 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 693 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1021, 21 lines modified | Offset 1021, 19 lines modified | ||
| 1021 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 1021 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 1022 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1022 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1023 | The·rear·package·can·be·installed·with·the·following·command: | 1023 | The·rear·package·can·be·installed·with·the·following·command: |
| 1024 | $·sudo·yum·install·rear | 1024 | $·sudo·yum·install·rear |
| 1025 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1025 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1026 | Severity: ·medium | 1026 | Severity: ·medium |
| 1027 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 1027 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1028 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1028 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1029 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1030 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1031 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1032 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1033 | package | 1029 | [[packages]] |
| 1030 | name·=·"rear" | ||
| 1031 | version·=·"*" | ||
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1032 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1035 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1033 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1036 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1034 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1037 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1035 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1038 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1036 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1039 | #·Remediation·is·applicable·only·in·certain·platforms | 1037 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1040 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 1038 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1064, 38 lines modified | Offset 1062, 40 lines modified | ||
| 1064 | ··tags: | 1062 | ··tags: |
| 1065 | ··-·enable_strategy | 1063 | ··-·enable_strategy |
| 1066 | ··-·low_complexity | 1064 | ··-·low_complexity |
| 1067 | ··-·low_disruption | 1065 | ··-·low_disruption |
| 1068 | ··-·medium_severity | 1066 | ··-·medium_severity |
| 1069 | ··-·no_reboot_needed | 1067 | ··-·no_reboot_needed |
| Max diff block lines reached; 171236/177897 bytes (96.26%) of diff not shown. | |||
| Offset 14569, 15 lines modified | Offset 14569, 15 lines modified | ||
| 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038ef0:·206f·6620·3230·323 | 00038ef0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16897, 180 lines modified | Offset 16897, 180 lines modified | ||
| 00042000:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | 00042000:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | ||
| 00042010:·3538·2220·7461·6269·6e64·6578·3d22·3022··58"·tabindex="0" | 00042010:·3538·2220·7461·6269·6e64·6578·3d22·3022··58"·tabindex="0" | ||
| 00042020:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00042020:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00042030:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00042030:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00042040:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00042040:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00042050:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00042050:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00042060:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00042060:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00042070:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 00042080:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00042090:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000420a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000420b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000420c0:·3837·3538·223e·3c74·6162·6c65·2063·6c61··8758"><table·cla | |||
| 000420d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000420e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000420f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00042100:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00042110:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00042120:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00042 | 00042070:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 00042080:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00042090:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000420a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000420b0:·6170·7365·2220·6964·3d22·6964·6d38·3735··apse"·id="idm875 | |||
| 000420c0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 000420d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000420e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000420f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00042100:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00042110:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00042120:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00042130:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00042140:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00042150:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000421 | 00042160:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 00042150:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00042160:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00042170:·6 | 00042170:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 00042180:· | 00042180:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 00042190:· | 00042190:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 000421a0:· | 000421a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 000421b0:·6 | 000421b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 000421c0:·2d2d·0a61·7069·5665·7273·696f·6e3a·206d··--.apiVersion:·m | |||
| 000421d0:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | |||
| 000421e0:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | |||
| 000421f0:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | |||
| 00042200:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | |||
| 00042210:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | |||
| 00042220:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | |||
| 00042230:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | |||
| 00042240:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | |||
| 00042250:·6974·733a·0a20·2020·2020·2020·202d·206e··its:.········-·n | |||
| 00042260:·616d·653a·2063·6f6e·6669·6775·7265·2d63··ame:·configure-c | |||
| 00042270:·7279·7074·6f2d·706f·6c69·6379·2e73·6572··rypto-policy.ser | |||
| 00042280:·7669·6365·0a20·2020·2020·2020·2020·2065··vice.··········e | |||
| 00042290:·6e61·626c·6564·3a20·7472·7565·0a20·2020··nabled:·true.··· | |||
| 000422a0:·2020·2020·2020·2063·6f6e·7465·6e74·733a·········contents: | |||
| 000422b0:·207c·0a20·2020·2020·2020·2020·2020·205b···|.············[ | |||
| 000422c0:·556e·6974·5d0a·2020·2020·2020·2020·2020··Unit].·········· | |||
| 000422d0:·2020·4265·666f·7265·3d6b·7562·656c·6574····Before=kubelet | |||
| 000422e0:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 000422f0:·2020·2020·205b·5365·7276·6963·655d·0a20·······[Service].· | |||
| 00042300:·2020·2020·2020·2020·2020·2054·7970·653d·············Type= | |||
| 00042310:·6f6e·6573·686f·740a·2020·2020·2020·2020··oneshot.········ | |||
| 00042320:·2020·2020·4578·6563·5374·6172·743d·7570······ExecStart=up | |||
| 00042330:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 00042340:·6369·6573·202d·2d73·6574·207b·7b2e·7661··cies·--set·{{.va | |||
| 00042350:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00042360:·706f·6c69·6379·7d7d·0a20·2020·2020·2020··policy}}.······· | |||
| 00042370:·2020·2020·2052·656d·6169·6e41·6674·6572·······RemainAfter | |||
| 00042380:·4578·6974·3d79·6573·0a20·2020·2020·2020··Exit=yes.······· | |||
| 00042390:·2020·2020·205b·496e·7374·616c·6c5d·0a20·······[Install].· | |||
| 000423a0:·2020·2020·2020·2020·2020·2057·616e·7465·············Wante | |||
| 000423b0:·6442·793d·6d75·6c74·692d·7573·6572·2e74··dBy=multi-user.t | |||
| 000423c0:·6172·6765·740a·3c2f·636f·6465·3e3c·2f70··arget.</code></p | |||
| 000423d0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000423e0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 000423f0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00042400:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00042410:·7461·7267·6574·3d22·2369·646d·3837·3539··target="#idm8759 | |||
| 00042420:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00042430:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042440:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042450:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042460:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042470:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042480:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00042490:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000424a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000424b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000424c0:·7365·2220·6964·3d22·6964·6d38·3735·3922··se"·id="idm8759" | |||
| 000424d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000424e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000424f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042500:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042510:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042520:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00042530:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042540:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00042550:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00042560:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00042570:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00042580:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00042590:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000425a0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 000425b0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000425c0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00042 | 000421c0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | ||
| 000421d0:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | |||
| 000421e0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| 000421f0:·6f74·6520·746f·2076·6172·6961·626c·650a··ote·to·variable. | |||
| Max diff block lines reached; 2063612/2088230 bytes (98.82%) of diff not shown. | |||
| Offset 75, 15 lines modified | Offset 75, 15 lines modified | ||
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 79 | ····*·cpe:/o:centos:centos:8 | 79 | ····*·cpe:/o:centos:centos:8 |
| 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 475, 39 lines modified | Offset 475, 14 lines modified | ||
| 475 | » echo·"to·see·what·package·to·(re)install"·>&2 | 475 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 476 | » false··#·end·with·an·error·code | 476 | » false··#·end·with·an·error·code |
| 477 | elif·test·"$rc"·!=·0;·then | 477 | elif·test·"$rc"·!=·0;·then |
| 478 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 478 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 479 | » false··#·end·with·an·error·code | 479 | » false··#·end·with·an·error·code |
| 480 | fi | 480 | fi |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 486 | --- | ||
| 487 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 488 | kind:·MachineConfig | ||
| 489 | spec: | ||
| 490 | ··config: | ||
| 491 | ····ignition: | ||
| 492 | ······version:·3.1.0 | ||
| 493 | ····systemd: | ||
| 494 | ······units: | ||
| 495 | ········-·name:·configure-crypto-policy.service | ||
| 496 | ··········enabled:·true | ||
| 497 | ··········contents:·| | ||
| 498 | ············[Unit] | ||
| 499 | ············Before=kubelet.service | ||
| 500 | ············[Service] | ||
| 501 | ············Type=oneshot | ||
| 502 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 503 | ············RemainAfterExit=yes | ||
| 504 | ············[Install] | ||
| 505 | ············WantedBy=multi-user.target | ||
| 506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 507 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 508 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 509 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 510 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 511 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 486 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 512 | ··set_fact: | 487 | ··set_fact: |
| Offset 552, 14 lines modified | Offset 527, 39 lines modified | ||
| 552 | ··-·PCI-DSSv4-2.2.7 | 527 | ··-·PCI-DSSv4-2.2.7 |
| 553 | ··-·configure_crypto_policy | 528 | ··-·configure_crypto_policy |
| 554 | ··-·high_severity | 529 | ··-·high_severity |
| 555 | ··-·low_complexity | 530 | ··-·low_complexity |
| 556 | ··-·low_disruption | 531 | ··-·low_disruption |
| 557 | ··-·no_reboot_needed | 532 | ··-·no_reboot_needed |
| 558 | ··-·restrict_strategy | 533 | ··-·restrict_strategy |
| 534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 535 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 536 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 537 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 538 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 539 | --- | ||
| 540 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 541 | kind:·MachineConfig | ||
| 542 | spec: | ||
| 543 | ··config: | ||
| 544 | ····ignition: | ||
| 545 | ······version:·3.1.0 | ||
| 546 | ····systemd: | ||
| 547 | ······units: | ||
| 548 | ········-·name:·configure-crypto-policy.service | ||
| 549 | ··········enabled:·true | ||
| 550 | ··········contents:·| | ||
| 551 | ············[Unit] | ||
| 552 | ············Before=kubelet.service | ||
| 553 | ············[Service] | ||
| 554 | ············Type=oneshot | ||
| 555 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 556 | ············RemainAfterExit=yes | ||
| 557 | ············[Install] | ||
| 558 | ············WantedBy=multi-user.target | ||
| 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 560 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 560 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 561 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 561 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 562 | Severity: ··medium | 562 | Severity: ··medium |
| 563 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 563 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 564 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 564 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 565 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 565 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1518, 21 lines modified | Offset 1518, 18 lines modified | ||
| 1518 | ············_\x8c_\x8u_\x8i·····3.4.5 | 1518 | ············_\x8c_\x8u_\x8i·····3.4.5 |
| 1519 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1519 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1520 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1520 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1521 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1521 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1522 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1522 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1523 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1523 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1524 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule | 1524 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule |
| 1525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1530 | 1526 | [customizations.services] | |
| 1527 | masked·=·["debug-shell"] | ||
| 1531 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1528 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1532 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1529 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1533 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1530 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1534 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1531 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1535 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1532 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1536 | #·Remediation·is·applicable·only·in·certain·platforms | 1533 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1537 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1534 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1550, 33 lines modified | Offset 1547, 14 lines modified | ||
| 1550 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1547 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1551 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1548 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1552 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1549 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1553 | else | 1550 | else |
| 1554 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1551 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1555 | fi | 1552 | fi |
| Max diff block lines reached; 160050/166586 bytes (96.08%) of diff not shown. | |||
| Offset 14562, 15 lines modified | Offset 14562, 15 lines modified | ||
| 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038e80:·206f·6620·3230·323 | 00038e80:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 17333, 236 lines modified | Offset 17333, 236 lines modified | ||
| 00043b40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00043b40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00043b50:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 00043b50:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 00043b60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00043b60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00043b70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00043b70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00043b80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00043b80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00043b90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00043b90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00043ba0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00043ba0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00043bb0:·656d·6564·6961·7469·6f6e·20 | 00043bb0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 00043bc0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 00043bd0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00043be0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00043bf0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00043c00:·7073·6522·2069·643d·2269·646d·3830·3032··pse"·id="idm8002 | |||
| 00043c10:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 00043c20:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00043c30:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 00043c40:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 00043c50:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00043c60:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00043c70:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00043c80:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00043c90:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 00043ca0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 00043cb0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00043cc0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00043cd0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00043ce0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00043cf0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00043d00:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00043 | 00043d10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 00043 | 00043d20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00043 | 00043d30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00043 | 00043d40:·2220·6964·3d22·6964·6d38·3030·3322·3e3c··"·id="idm8003">< | ||
| 00043 | 00043d50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 00043 | 00043d60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 00043 | 00043d70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 00043 | 00043d80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 00043 | 00043d90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 00043 | 00043da0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 00043c60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00043c70:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00043c80:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00043c90:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00043ca0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00043 | 00043db0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00043dc0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00043dd0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00043de0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00043df0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00043e00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00043 | 00043e10:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 00043 | 00043e20:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 00043 | 00043e30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 00043cf0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 00043 | 00043e40:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 00043e50:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 00043e60:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 00043e70:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 00043e80:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 00043e90:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 00043ea0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 00043eb0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 00043ec0:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 00043ed0:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 00043ee0:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 00043ef0:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 00043f00:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 00043f10:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 00043f20:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 00043f30:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 00043f40:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 00043 | 00043f50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 00043 | 00043f60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 00043 | 00043f70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 00043 | 00043f80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 00043 | 00043f90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00043 | 00043fa0:·743d·2223·6964·6d38·3030·3422·2074·6162··t="#idm8004"·tab | ||
| 00043 | 00043fb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00043 | 00043fc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00043 | 00043fd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00043 | 00043fe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00043 | 00043ff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00043dc0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00043dd0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00043de0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00043df0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00043e00:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00043e10:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 00043e20:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00043e30:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00043e40:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00043e50:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0004 | 00044000:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00044010:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00044020:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00044030:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00044040:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00044050:·643d·2269·646d·3830·3034·223e·3c74·6162··d="idm8004"><tab | |||
| 00044060:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00044070:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00044080:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00044090:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 000440a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 000440b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000440c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 000440d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004 | 000440e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00043e80:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0004 | 000440f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 00044100:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004 | 00044110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| Max diff block lines reached; 2499745/2532091 bytes (98.72%) of diff not shown. | |||
| Offset 73, 15 lines modified | Offset 73, 15 lines modified | ||
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 77 | ····*·cpe:/o:centos:centos:8 | 77 | ····*·cpe:/o:centos:centos:8 |
| 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 587, 21 lines modified | Offset 587, 19 lines modified | ||
| 587 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 587 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 588 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 588 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 589 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 589 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 590 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 590 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 591 | ············_\x8c_\x8i_\x8s············5.3.1 | 591 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 592 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 592 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 593 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 593 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 599 | package | 595 | [[packages]] |
| 596 | name·=·"aide" | ||
| 597 | version·=·"*" | ||
| 600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 601 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 602 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 603 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 604 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 605 | #·Remediation·is·applicable·only·in·certain·platforms | 603 | #·Remediation·is·applicable·only·in·certain·platforms |
| 606 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 604 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 631, 38 lines modified | Offset 629, 40 lines modified | ||
| 631 | ··-·PCI-DSSv4-11.5.2 | 629 | ··-·PCI-DSSv4-11.5.2 |
| 632 | ··-·enable_strategy | 630 | ··-·enable_strategy |
| 633 | ··-·low_complexity | 631 | ··-·low_complexity |
| 634 | ··-·low_disruption | 632 | ··-·low_disruption |
| 635 | ··-·medium_severity | 633 | ··-·medium_severity |
| 636 | ··-·no_reboot_needed | 634 | ··-·no_reboot_needed |
| 637 | ··-·package_aide_installed | 635 | ··-·package_aide_installed |
| 638 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 639 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 640 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 641 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 642 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 643 | package·--add=aide | ||
| 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 645 | [[packages]] | ||
| 646 | name·=·"aide" | ||
| 647 | version·=·"*" | ||
| 648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 649 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 650 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 651 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 652 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 653 | include·install_aide | 641 | include·install_aide |
| 654 | class·install_aide·{ | 642 | class·install_aide·{ |
| 655 | ··package·{·'aide': | 643 | ··package·{·'aide': |
| 656 | ····ensure·=>·'installed', | 644 | ····ensure·=>·'installed', |
| 657 | ··} | 645 | ··} |
| 658 | } | 646 | } |
| 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 652 | package·install·aide | ||
| 653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 657 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 658 | package·--add=aide | ||
| 659 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 659 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 661 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 661 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 662 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 662 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 663 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 663 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 682, 14 lines modified | Offset 682, 18 lines modified | ||
| 682 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 682 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 683 | ············_\x8i_\x8s_\x8m······1446 | 683 | ············_\x8i_\x8s_\x8m······1446 |
| 684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 688 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 688 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 690 | [customizations] | ||
| 691 | fips·=·true | ||
| 689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 690 | #·Remediation·is·applicable·only·in·certain·platforms | 693 | #·Remediation·is·applicable·only·in·certain·platforms |
| 691 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 694 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 692 | var_system_crypto_policy='FIPS' | 695 | var_system_crypto_policy='FIPS' |
| Offset 816, 18 lines modified | Offset 820, 14 lines modified | ||
| 816 | ··-·NIST-800-53-SC-13 | 820 | ··-·NIST-800-53-SC-13 |
| 817 | ··-·enable_fips_mode | 821 | ··-·enable_fips_mode |
| 818 | ··-·high_severity | 822 | ··-·high_severity |
| 819 | ··-·medium_complexity | 823 | ··-·medium_complexity |
| 820 | ··-·medium_disruption | 824 | ··-·medium_disruption |
| 821 | ··-·reboot_required | 825 | ··-·reboot_required |
| 822 | ··-·restrict_strategy | 826 | ··-·restrict_strategy |
| 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 824 | [customizations] | ||
| 825 | fips·=·true | ||
| 826 | Group ·System·Cryptographic·Policies· Group·contains·3·rules | 827 | Group ·System·Cryptographic·Policies· Group·contains·3·rules |
| 827 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 828 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 828 | ····*·GnuTLS·library | 829 | ····*·GnuTLS·library |
| Max diff block lines reached; 231572/238522 bytes (97.09%) of diff not shown. | |||
| Offset 14556, 15 lines modified | Offset 14556, 15 lines modified | ||
| 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038e20:·2032·3032·3 | 00038e20:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15331, 235 lines modified | Offset 15331, 235 lines modified | ||
| 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003be90:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003bea0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003beb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bec0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bed0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bee0:·2069·643d·2269·646d·3830·3032·223e·3c70···id="idm8002"><p | |||
| 0003bef0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003bf00:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003bf10:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003be90:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003bea0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003beb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bec0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bed0:·3d22·6964·6d38·3030·3222·3e3c·7461·626c··="idm8002"><tabl | |||
| 0003bee0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bef0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bf00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bf10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bf20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bf30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bf40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bf50:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bf60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bf70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bf80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bf90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bfa0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bfb0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bfc0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bfd0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003bfe0:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003bff0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c000:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c010:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c020:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c030:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c040:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c0a0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003c0b0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c0e0:·7365·2220·6964·3d22·6964·6d38·3030·3322··se"·id="idm8003" | |||
| 0003c0f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c100:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c110:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c120:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c130:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c140:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c150:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c160:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c170:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c180:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c190:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c1a0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c1b0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c1c0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c1d0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c1e0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003c1f0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003c200:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003c210:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003c220:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003c230:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003c240:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003c250:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003c260:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003c270:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003c280:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 0003c290:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003c2a0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003c2b0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003c2c0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003c2d0:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003c2e0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003 | 0003bf20:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003 | 0003bf30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003bf40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bf50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bf60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bf70:·6765·743d·2223·6964·6d38·3030·3322·2074··get="#idm8003"·t | |||
| 0003bf80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bf90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bfa0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bfb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bfc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bfd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bfe0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003bff0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c000:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c010:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c020:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c030:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c040:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c050:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c060:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c070:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c080:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c090:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c0a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| Max diff block lines reached; 3600494/3632702 bytes (99.11%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 130, 21 lines modified | Offset 130, 19 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package | 138 | [[packages]] |
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 174, 38 lines modified | Offset 172, 40 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 174 | ··-·low_complexity |
| 177 | ··-·low_disruption | 175 | ··-·low_disruption |
| 178 | ··-·medium_severity | 176 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | [[packages]] | ||
| 189 | name·=·"aide" | ||
| 190 | version·=·"*" | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | include·install_aide | 184 | include·install_aide |
| 197 | class·install_aide·{ | 185 | class·install_aide·{ |
| 198 | ··package·{·'aide': | 186 | ··package·{·'aide': |
| 199 | ····ensure·=>·'installed', | 187 | ····ensure·=>·'installed', |
| 200 | ··} | 188 | ··} |
| 201 | } | 189 | } |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·install·aide | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 201 | package·--add=aide | ||
| 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 322, 14 lines modified | Offset 322, 18 lines modified | ||
| 322 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 322 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 323 | ············_\x8i_\x8s_\x8m······1446 | 323 | ············_\x8i_\x8s_\x8m······1446 |
| 324 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 324 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 325 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 325 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 326 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 326 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [customizations] | ||
| 331 | fips·=·true | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | 333 | #·Remediation·is·applicable·only·in·certain·platforms |
| 331 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 334 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 332 | var_system_crypto_policy='FIPS:OSPP' | 335 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 456, 18 lines modified | Offset 460, 14 lines modified | ||
| 456 | ··-·NIST-800-53-SC-13 | 460 | ··-·NIST-800-53-SC-13 |
| 457 | ··-·enable_fips_mode | 461 | ··-·enable_fips_mode |
| 458 | ··-·high_severity | 462 | ··-·high_severity |
| 459 | ··-·medium_complexity | 463 | ··-·medium_complexity |
| 460 | ··-·medium_disruption | 464 | ··-·medium_disruption |
| 461 | ··-·reboot_required | 465 | ··-·reboot_required |
| 462 | ··-·restrict_strategy | 466 | ··-·restrict_strategy |
| 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 464 | [customizations] | ||
| 465 | fips·=·true | ||
| 466 | Group ·System·Cryptographic·Policies· Group·contains·8·rules | 467 | Group ·System·Cryptographic·Policies· Group·contains·8·rules |
| 467 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 468 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 468 | ····*·GnuTLS·library | 469 | ····*·GnuTLS·library |
| Max diff block lines reached; 440187/447162 bytes (98.44%) of diff not shown. | |||
| Offset 14550, 16 lines modified | Offset 14550, 16 lines modified | ||
| 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038dc0:·2020·2028·6173·206f·6620·3230·323 | 00038dc0:·2020·2028·6173·206f·6620·3230·3236·2d30·····(as·of·2026-0 | ||
| 00038dd0:·3 | 00038dd0:·312d·3238·290a·2020·2020·2020·2020·2020··1-28).·········· | ||
| 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 16668, 236 lines modified | Offset 16668, 236 lines modified | ||
| 000411b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000411b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000411c0:·646d·3830·3032·2220·7461·6269·6e64·6578··dm8002"·tabindex | 000411c0:·646d·3830·3032·2220·7461·6269·6e64·6578··dm8002"·tabindex | ||
| 000411d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000411d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000411e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000411e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000411f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000411f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00041200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00041200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00041210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00041210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00041220:·6d65·6469·6174·696f·6e20· | 00041220:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00041230:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00041240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00041250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041270:·7365·2220·6964·3d22·6964·6d38·3030·3222··se"·id="idm8002" | |||
| 00041230:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00041240:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00041250:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00041260:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | |||
| 00041270:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00041280:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00041290:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 000412a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000412b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000412c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000412d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000412e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000412f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00041300:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00041310:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00041320:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00041330:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00041340:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00041350:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00041360:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 00041370:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 00041380:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00041390:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000413a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 000413b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 000413c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 000413d0:·646d·3830·3033·2220·7461·6269·6e64·6578··dm8003"·tabindex | |||
| 000413e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 000413f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00041400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00041410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00041420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00041430:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 00041440:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00041450:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00041460:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041470:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 00041480:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 00041490:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 000414a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000414b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 000414c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 000414d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 000414e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000414f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00041500:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041510:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041520:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00041530:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00041540:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00041550:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00041560:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00041 | 00041280:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 00041290:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000412a0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 00041580:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 00041590:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 000415a0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 000415b0:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 000415c0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 000415d0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 000415e0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 000415f0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 00041600:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 00041610:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 00041620:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 00041630:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 00041640:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 00041650:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 00041660:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 00041670:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 00041 | 000412b0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 00041 | 000412c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 00041 | 000412d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 00041 | 000412e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 00041 | 000412f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 00041 | 00041300:·7461·7267·6574·3d22·2369·646d·3830·3033··target="#idm8003 | ||
| 00041 | 00041310:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00041 | 00041320:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00041 | 00041330:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00041 | 00041340:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00041 | 00041350:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00041 | 00041360:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00041370:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 00041380:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00041390:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00041740:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00041750:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00041760:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041770:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041780:·7365·2220·6964·3d22·6964·6d38·3030·3422··se"·id="idm8004" | |||
| 00041790:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000417a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000417b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000417c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000417d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000417e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| Max diff block lines reached; 2551186/2583670 bytes (98.74%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 443, 21 lines modified | Offset 443, 19 lines modified | ||
| 443 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 443 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 444 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 444 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 445 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 445 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 446 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 446 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 447 | ············_\x8c_\x8i_\x8s············5.3.1 | 447 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 448 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 448 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 449 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 449 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 455 | package | 451 | [[packages]] |
| 452 | name·=·"aide" | ||
| 453 | version·=·"*" | ||
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 461 | #·Remediation·is·applicable·only·in·certain·platforms | 459 | #·Remediation·is·applicable·only·in·certain·platforms |
| 462 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 460 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 487, 38 lines modified | Offset 485, 40 lines modified | ||
| 487 | ··-·PCI-DSSv4-11.5.2 | 485 | ··-·PCI-DSSv4-11.5.2 |
| 488 | ··-·enable_strategy | 486 | ··-·enable_strategy |
| 489 | ··-·low_complexity | 487 | ··-·low_complexity |
| 490 | ··-·low_disruption | 488 | ··-·low_disruption |
| 491 | ··-·medium_severity | 489 | ··-·medium_severity |
| 492 | ··-·no_reboot_needed | 490 | ··-·no_reboot_needed |
| 493 | ··-·package_aide_installed | 491 | ··-·package_aide_installed |
| 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 499 | package·--add=aide | ||
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 501 | [[packages]] | ||
| 502 | name·=·"aide" | ||
| 503 | version·=·"*" | ||
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 509 | include·install_aide | 497 | include·install_aide |
| 510 | class·install_aide·{ | 498 | class·install_aide·{ |
| 511 | ··package·{·'aide': | 499 | ··package·{·'aide': |
| 512 | ····ensure·=>·'installed', | 500 | ····ensure·=>·'installed', |
| 513 | ··} | 501 | ··} |
| 514 | } | 502 | } |
| 503 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 504 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 505 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 506 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 507 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 508 | package·install·aide | ||
| 509 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 510 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 511 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 512 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 513 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 514 | package·--add=aide | ||
| 515 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 515 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 516 | Run·the·following·command·to·generate·a·new·database: | 516 | Run·the·following·command·to·generate·a·new·database: |
| 517 | $·sudo·/usr/sbin/aide·--init | 517 | $·sudo·/usr/sbin/aide·--init |
| 518 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 518 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 519 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 519 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 520 | To·initiate·a·manual·check,·run·the·following·command: | 520 | To·initiate·a·manual·check,·run·the·following·command: |
| 521 | $·sudo·/usr/sbin/aide·--check | 521 | $·sudo·/usr/sbin/aide·--check |
| Offset 830, 39 lines modified | Offset 830, 14 lines modified | ||
| 830 | » echo·"to·see·what·package·to·(re)install"·>&2 | 830 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 831 | » false··#·end·with·an·error·code | 831 | » false··#·end·with·an·error·code |
| 832 | elif·test·"$rc"·!=·0;·then | 832 | elif·test·"$rc"·!=·0;·then |
| 833 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 833 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 834 | » false··#·end·with·an·error·code | 834 | » false··#·end·with·an·error·code |
| 835 | fi | 835 | fi |
| 836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 837 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 838 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 839 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 840 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 841 | --- | ||
| 842 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 843 | kind:·MachineConfig | ||
| 844 | spec: | ||
| 845 | ··config: | ||
| 846 | ····ignition: | ||
| 847 | ······version:·3.1.0 | ||
| 848 | ····systemd: | ||
| 849 | ······units: | ||
| 850 | ········-·name:·configure-crypto-policy.service | ||
| 851 | ··········enabled:·true | ||
| 852 | ··········contents:·| | ||
| 853 | ············[Unit] | ||
| 854 | ············Before=kubelet.service | ||
| 855 | ············[Service] | ||
| 856 | ············Type=oneshot | ||
| 857 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 858 | ············RemainAfterExit=yes | ||
| 859 | ············[Install] | ||
| 860 | ············WantedBy=multi-user.target | ||
| 861 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 234398/239987 bytes (97.67%) of diff not shown. | |||
| Offset 14560, 15 lines modified | Offset 14560, 15 lines modified | ||
| 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038e60:·3032·3 | 00038e60:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | ||
| 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c040:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003c050:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003c060:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c070:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c080:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c090:·6d38·3030·3222·3e3c·7072·653e·3c63·6f64··m8002"><pre><cod | |||
| 0003c0a0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003c0b0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003c0c0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003c040:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003c050:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c060:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c070:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c080:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003c090:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c0a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c0b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c0c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c0d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c0e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c0f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c100:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c110:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c120:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c130:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c140:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c150:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c160:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c170:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003c180:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003c190:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003c1a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c1b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c1c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c1d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c1e0:·6574·3d22·2369·646d·3830·3033·2220·7461··et="#idm8003"·ta | |||
| 0003c1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c250:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003c260:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c270:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c280:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c290:·2269·646d·3830·3033·223e·3c74·6162·6c65··"idm8003"><table | |||
| 0003c2a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c2b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c2c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c2d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c2e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c2f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c300:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c310:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c320:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c330:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c340:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c350:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c360:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c370:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c380:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c390:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003c3a0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003c3b0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003c3c0:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003c3d0:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003c3e0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003c3f0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003c400:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003c410:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003c420:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003c430:·2020·2020·7975·6d20·696e·7374·616c·6c20······yum·install· | |||
| 0003c440:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003c450:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003c460:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003c470:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003c480:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003c490:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003c | 0003c0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003c | 0003c0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003c | 0003c0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003c | 0003c100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003c | 0003c110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003c | 0003c120:·646d·3830·3033·2220·7461·6269·6e64·6578··dm8003"·tabindex | ||
| 0003c | 0003c130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003c | 0003c140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003c | 0003c150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003c | 0003c160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003c | 0003c170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003c | 0003c180:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003c190:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003c1a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c1b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c1c0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c1d0:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003c1e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c560:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003c570:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c580:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c590:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c5a0:·6d38·3030·3422·3e3c·7461·626c·6520·636c··m8004"><table·cl | |||
| 0003c5b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c5c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| Max diff block lines reached; 3726245/3758453 bytes (99.14%) of diff not shown. | |||
| Offset 72, 15 lines modified | Offset 72, 15 lines modified | ||
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 76 | ····*·cpe:/o:centos:centos:8 | 76 | ····*·cpe:/o:centos:centos:8 |
| 77 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 77 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 78 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 78 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 79 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 79 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 80 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 81 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 81 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 82 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 82 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 83 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 83 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 84 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 135, 21 lines modified | Offset 135, 19 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············5.3.1 | 139 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package | 143 | [[packages]] |
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 151 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 38 lines modified | Offset 177, 40 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 177 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 178 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 179 | ··-·low_complexity |
| 182 | ··-·low_disruption | 180 | ··-·low_disruption |
| 183 | ··-·medium_severity | 181 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 182 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 183 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | [[packages]] | ||
| 194 | name·=·"aide" | ||
| 195 | version·=·"*" | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | include·install_aide | 189 | include·install_aide |
| 202 | class·install_aide·{ | 190 | class·install_aide·{ |
| 203 | ··package·{·'aide': | 191 | ··package·{·'aide': |
| 204 | ····ensure·=>·'installed', | 192 | ····ensure·=>·'installed', |
| 205 | ··} | 193 | ··} |
| 206 | } | 194 | } |
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | package·install·aide | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 211 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 211 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 212 | To·initiate·a·manual·check,·run·the·following·command: | 212 | To·initiate·a·manual·check,·run·the·following·command: |
| 213 | $·sudo·/usr/sbin/aide·--check | 213 | $·sudo·/usr/sbin/aide·--check |
| Offset 1717, 14 lines modified | Offset 1717, 18 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1717 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1718 | ············_\x8i_\x8s_\x8m······1446 | 1718 | ············_\x8i_\x8s_\x8m······1446 |
| 1719 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1719 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1720 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1720 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1721 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1721 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1722 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1722 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1723 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1723 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [customizations] | ||
| 1726 | fips·=·true | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1727 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1725 | #·Remediation·is·applicable·only·in·certain·platforms | 1728 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1726 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1729 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1727 | var_system_crypto_policy='FIPS' | 1730 | var_system_crypto_policy='FIPS' |
| Offset 1851, 18 lines modified | Offset 1855, 14 lines modified | ||
| 1851 | ··-·NIST-800-53-SC-13 | 1855 | ··-·NIST-800-53-SC-13 |
| 1852 | ··-·enable_fips_mode | 1856 | ··-·enable_fips_mode |
| 1853 | ··-·high_severity | 1857 | ··-·high_severity |
| 1854 | ··-·medium_complexity | 1858 | ··-·medium_complexity |
| 1855 | ··-·medium_disruption | 1859 | ··-·medium_disruption |
| 1856 | ··-·reboot_required | 1860 | ··-·reboot_required |
| 1857 | ··-·restrict_strategy | 1861 | ··-·restrict_strategy |
| 1858 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1859 | [customizations] | ||
| 1860 | fips·=·true | ||
| 1861 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1862 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1862 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1863 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1863 | fips-mode-setup·--enable | 1864 | fips-mode-setup·--enable |
| Max diff block lines reached; 407784/414241 bytes (98.44%) of diff not shown. | |||
| Offset 14584, 15 lines modified | Offset 14584, 15 lines modified | ||
| 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038fe0:·6f66·2032·3032·3 | 00038fe0:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15377, 235 lines modified | Offset 15377, 235 lines modified | ||
| 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c170:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c180:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c190:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c1a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c1b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c1c0:·646d·3830·3032·223e·3c70·7265·3e3c·636f··dm8002"><pre><co | |||
| 0003c1d0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003c1e0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003c1f0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003c170:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c180:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c190:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c1a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c1b0:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003c1c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c1d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c1e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c1f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c200:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c210:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c220:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c230:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c240:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c250:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c260:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c270:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c280:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c290:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c2a0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003c2b0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003c2c0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003c2d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c2e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c2f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c300:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c310:·6765·743d·2223·6964·6d38·3030·3322·2074··get="#idm8003"·t | |||
| 0003c320:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c330:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c340:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c350:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c360:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c370:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c380:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003c390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c3a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c3b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c3c0:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c3f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c410:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c420:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c430:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c440:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c450:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c470:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c490:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c4c0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003c4d0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003c4e0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003c4f0:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003c500:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003c510:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003c520:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003c530:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003c540:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003c550:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003c560:·0a20·2020·2079·756d·2069·6e73·7461·6c6c··.····yum·install | |||
| 0003c570:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003c580:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003c590:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003c5a0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003c5b0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003c5c0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003c | 0003c200:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003c | 0003c210:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003c | 0003c220:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003c | 0003c230:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003c | 0003c240:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c | 0003c250:·6964·6d38·3030·3322·2074·6162·696e·6465··idm8003"·tabinde | ||
| 0003c | 0003c260:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c | 0003c270:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c | 0003c280:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c | 0003c290:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c | 0003c2a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c | 0003c2b0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003c2c0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c2d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c2e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c2f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c300:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c310:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c320:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c330:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c340:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c350:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c690:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c6a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c6b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| Max diff block lines reached; 3673057/3705265 bytes (99.13%) of diff not shown. | |||
| Offset 78, 15 lines modified | Offset 78, 15 lines modified | ||
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 82 | ····*·cpe:/o:centos:centos:8 | 82 | ····*·cpe:/o:centos:centos:8 |
| 83 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 84 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 84 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 85 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 85 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 86 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 86 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 87 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 87 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 88 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 88 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 89 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 89 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 90 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 91 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 92 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 92 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 140, 21 lines modified | Offset 140, 19 lines modified | ||
| 140 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 140 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 142 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 142 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 143 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 143 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 144 | ············_\x8c_\x8i_\x8s············5.3.1 | 144 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 146 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package | 148 | [[packages]] |
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 184, 38 lines modified | Offset 182, 40 lines modified | ||
| 184 | ··-·PCI-DSSv4-11.5.2 | 182 | ··-·PCI-DSSv4-11.5.2 |
| 185 | ··-·enable_strategy | 183 | ··-·enable_strategy |
| 186 | ··-·low_complexity | 184 | ··-·low_complexity |
| 187 | ··-·low_disruption | 185 | ··-·low_disruption |
| 188 | ··-·medium_severity | 186 | ··-·medium_severity |
| 189 | ··-·no_reboot_needed | 187 | ··-·no_reboot_needed |
| 190 | ··-·package_aide_installed | 188 | ··-·package_aide_installed |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=aide | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | [[packages]] | ||
| 199 | name·=·"aide" | ||
| 200 | version·=·"*" | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | include·install_aide | 194 | include·install_aide |
| 207 | class·install_aide·{ | 195 | class·install_aide·{ |
| 208 | ··package·{·'aide': | 196 | ··package·{·'aide': |
| 209 | ····ensure·=>·'installed', | 197 | ····ensure·=>·'installed', |
| 210 | ··} | 198 | ··} |
| 211 | } | 199 | } |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | package·install·aide | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 213 | Run·the·following·command·to·generate·a·new·database: | 213 | Run·the·following·command·to·generate·a·new·database: |
| 214 | $·sudo·/usr/sbin/aide·--init | 214 | $·sudo·/usr/sbin/aide·--init |
| 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 216 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 216 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 217 | To·initiate·a·manual·check,·run·the·following·command: | 217 | To·initiate·a·manual·check,·run·the·following·command: |
| 218 | $·sudo·/usr/sbin/aide·--check | 218 | $·sudo·/usr/sbin/aide·--check |
| Offset 1722, 14 lines modified | Offset 1722, 18 lines modified | ||
| 1722 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1722 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1723 | ············_\x8i_\x8s_\x8m······1446 | 1723 | ············_\x8i_\x8s_\x8m······1446 |
| 1724 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1724 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1725 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1725 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1726 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1726 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1727 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1727 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1728 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1728 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1730 | [customizations] | ||
| 1731 | fips·=·true | ||
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1730 | #·Remediation·is·applicable·only·in·certain·platforms | 1733 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1731 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1734 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1732 | var_system_crypto_policy='FIPS' | 1735 | var_system_crypto_policy='FIPS' |
| Offset 1856, 18 lines modified | Offset 1860, 14 lines modified | ||
| 1856 | ··-·NIST-800-53-SC-13 | 1860 | ··-·NIST-800-53-SC-13 |
| 1857 | ··-·enable_fips_mode | 1861 | ··-·enable_fips_mode |
| 1858 | ··-·high_severity | 1862 | ··-·high_severity |
| 1859 | ··-·medium_complexity | 1863 | ··-·medium_complexity |
| 1860 | ··-·medium_disruption | 1864 | ··-·medium_disruption |
| 1861 | ··-·reboot_required | 1865 | ··-·reboot_required |
| 1862 | ··-·restrict_strategy | 1866 | ··-·restrict_strategy |
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1864 | [customizations] | ||
| 1865 | fips·=·true | ||
| 1866 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1867 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1867 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1868 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1868 | fips-mode-setup·--enable | 1869 | fips-mode-setup·--enable |
| Max diff block lines reached; 402611/409068 bytes (98.42%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038690:·6620·3230·323 | 00038690:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15180, 234 lines modified | Offset 15180, 234 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20· | 0003b520:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b530:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b530:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b540:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b550:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b560:·2069·643d·2269·646d·3732·3733·223e·3c74···id="idm7273"><t | |||
| 0003b570:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b580:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b590:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b5a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b5b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b5c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b5d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b5e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b5f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b600:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b610:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b620:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b630:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b640:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b650:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b660:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 0003b670:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003b680:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b690:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b6a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b6b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b6c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b6d0:·646d·3732·3734·2220·7461·6269·6e64·6578··dm7274"·tabindex | |||
| 0003b6e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b6f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b700:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b710:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b720:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b730:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b740:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b750:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b760:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b770:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b780:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 0003b790:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b7a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b7b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b7c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b7d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b7e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b7f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b800:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b810:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b820:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b830:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b840:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b850:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b860:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b870:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003b880:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b890:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b8a0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b8b0:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003b8c0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b8d0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b8e0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b8f0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003b900:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003b910:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003b920:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003b930:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003b940:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b950:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b960:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b970:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b980:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003b990:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b9a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b9b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b9c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b9d0:·7461·7267·6574·3d22·2369·646d·3732·3735··target="#idm7275 | |||
| 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ba40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b | 0003b540:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003b550:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b560:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b570:·7365·2220·6964·3d22·6964·6d37·3237·3322··se"·id="idm7273" | ||
| 0003b580:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b590:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b5a0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b5b0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b5c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b5d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ba90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003baa0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bab0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bac0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bad0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bae0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003baf0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bb00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bb10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bb20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| Max diff block lines reached; 2728649/2760719 bytes (98.84%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 21 lines modified | Offset 119, 19 lines modified | ||
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8c_\x8i_\x8s············6.1.1 | 124 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package | 127 | [[packages]] |
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 135 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 38 lines modified | Offset 160, 40 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 162 | ··-·low_complexity |
| 165 | ··-·low_disruption | 163 | ··-·low_disruption |
| 166 | ··-·medium_severity | 164 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·--add=aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | 172 | include·install_aide |
| 185 | class·install_aide·{ | 173 | class·install_aide·{ |
| 186 | ··package·{·'aide': | 174 | ··package·{·'aide': |
| 187 | ····ensure·=>·'installed', | 175 | ····ensure·=>·'installed', |
| 188 | ··} | 176 | ··} |
| 189 | } | 177 | } |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·install·aide | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 321, 50 lines modified | Offset 321, 50 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 321 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 322 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 322 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 326 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 326 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 327 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 327 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 329 | [[customizations.filesystem]] | ||
| 330 | mountpoint·=·"/home" | ||
| 331 | size·=·1073741824 | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 329 | logvol·/home·1024 | 333 | logvol·/home·1024 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 335 | part·/home | 339 | part·/home |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 337 | [[customizations.filesystem]] | ||
| 338 | mountpoint·=·"/home" | ||
| 339 | size·=·1073741824 | ||
| 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 342 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 342 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 343 | Severity: ··unknown | 343 | Severity: ··unknown |
| 344 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv | 344 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 345 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 345 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| Max diff block lines reached; 223288/230186 bytes (97.00%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038680:·6620·3230·323 | 00038680:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15185, 234 lines modified | Offset 15185, 234 lines modified | ||
| 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b570:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b570:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b580:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b580:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b590:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b5a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b5b0:·7365·2220·6964·3d22·6964·6d37·3237·3322··se"·id="idm7273" | |||
| 0003b5c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b5d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b5e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b5f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b600:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b610:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b620:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b630:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b640:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b650:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b660:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b670:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b680:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b690:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b6a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b6b0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003b6c0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003b6d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b6e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b6f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b700:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b710:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b720:·2223·6964·6d37·3237·3422·2074·6162·696e··"#idm7274"·tabin | |||
| 0003b730:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b740:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b750:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b760:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b770:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b780:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b790:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b7a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b7b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b7c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b7d0:·6d37·3237·3422·3e3c·7461·626c·6520·636c··m7274"><table·cl | |||
| 0003b7e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b7f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b800:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b810:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b820:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b830:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b840:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b850:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b860:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b870:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b880:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b890:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b8a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b8b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b8c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b8d0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b8e0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b8f0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b900:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003b910:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b920:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b930:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b940:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003b950:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003b960:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003b970:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 0003b980:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003b990:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003b9a0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003b9b0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003b9c0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003b9d0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003b9e0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b9f0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ba00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ba10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ba20:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003ba30:·3237·3522·2074·6162·696e·6465·783d·2230··275"·tabindex="0 | |||
| 0003ba40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ba50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ba60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ba70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ba80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003ba90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b | 0003b590:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b | 0003b5a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b5b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b5c0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | ||
| 0003bae0:·3735·223e·3c74·6162·6c65·2063·6c61·7373··75"><table·class | |||
| 0003baf0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b | 0003b5d0:·3733·223e·3c70·7265·3e3c·636f·6465·3e0a··73"><pre><code>. | ||
| 0003b5e0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b5f0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b600:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b610:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b620:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b630:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b640:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b650:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b660:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b670:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b680:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b690:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b6a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| Max diff block lines reached; 2822875/2854945 bytes (98.88%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 77 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 78 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 78 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 21 lines modified | Offset 120, 19 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package | 128 | [[packages]] |
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 163, 38 lines modified | Offset 161, 40 lines modified | ||
| 163 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 164 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 165 | ··-·low_complexity | 163 | ··-·low_complexity |
| 166 | ··-·low_disruption | 164 | ··-·low_disruption |
| 167 | ··-·medium_severity | 165 | ··-·medium_severity |
| 168 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | 173 | include·install_aide |
| 186 | class·install_aide·{ | 174 | class·install_aide·{ |
| 187 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 188 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 189 | ··} | 177 | ··} |
| 190 | } | 178 | } |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 788, 50 lines modified | Offset 788, 50 lines modified | ||
| 788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 789 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 789 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 790 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 790 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 791 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 791 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 792 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 792 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 793 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 793 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 794 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 794 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 796 | [[customizations.filesystem]] | ||
| 797 | mountpoint·=·"/home" | ||
| 798 | size·=·1073741824 | ||
| 795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 796 | logvol·/home·1024 | 800 | logvol·/home·1024 |
| 797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 802 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 803 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 804 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 805 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 802 | part·/home | 806 | part·/home |
| 803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 804 | [[customizations.filesystem]] | ||
| 805 | mountpoint·=·"/home" | ||
| 806 | size·=·1073741824 | ||
| 807 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 807 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 808 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 808 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 809 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 809 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 810 | Severity: ··unknown | 810 | Severity: ··unknown |
| 811 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv | 811 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 812 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 812 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| Max diff block lines reached; 231751/238596 bytes (97.13%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000386a0:·6620·3230·323 | 000386a0:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15176, 234 lines modified | Offset 15176, 234 lines modified | ||
| 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b4f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b500:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b510:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b520:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b530:·2069·643d·2269·646d·3732·3733·223e·3c70···id="idm7273"><p | |||
| 0003b540:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b550:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b560:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b4e0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003b4f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b500:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b510:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b520:·3d22·6964·6d37·3237·3322·3e3c·7461·626c··="idm7273"><tabl | |||
| 0003b530:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b540:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b550:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b560:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b570:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b580:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b590:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b5a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b5b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b5c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b5d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b5e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b5f0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b600:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b610:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b620:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003b630:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003b640:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b650:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b660:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b670:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b680:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b690:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b6a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b6b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b6c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b6d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b6e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b6f0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b700:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b710:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b720:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b730:·7365·2220·6964·3d22·6964·6d37·3237·3422··se"·id="idm7274" | |||
| 0003b740:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b750:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b760:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b770:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b780:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b790:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b7a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b7b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b7c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b7d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b7e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b7f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b800:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b810:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b820:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b830:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b840:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b850:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b860:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b870:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b880:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b890:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b8a0:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b8b0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b8c0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b8d0:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003b8e0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b8f0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b900:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b910:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b920:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b930:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b | 0003b570:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b580:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b590:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b | 0003b5a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b5b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b5c0:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | ||
| 0003b | 0003b5d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b | 0003b5e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b | 0003b5f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b | 0003b600:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b | 0003b610:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b | 0003b620:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b630:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b640:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b650:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b660:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b670:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 0003b680:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b690:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b6a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b6b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b6c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ba00:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ba10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ba20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| Max diff block lines reached; 1573154/1605224 bytes (98.00%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 21 lines modified | Offset 135, 19 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package | 143 | [[packages]] |
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 151 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 38 lines modified | Offset 176, 40 lines modified | ||
| 178 | ··-·PCI-DSSv4-11.5.2 | 176 | ··-·PCI-DSSv4-11.5.2 |
| 179 | ··-·enable_strategy | 177 | ··-·enable_strategy |
| 180 | ··-·low_complexity | 178 | ··-·low_complexity |
| 181 | ··-·low_disruption | 179 | ··-·low_disruption |
| 182 | ··-·medium_severity | 180 | ··-·medium_severity |
| 183 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 184 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | [[packages]] | ||
| 193 | name·=·"aide" | ||
| 194 | version·=·"*" | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | include·install_aide | 188 | include·install_aide |
| 201 | class·install_aide·{ | 189 | class·install_aide·{ |
| 202 | ··package·{·'aide': | 190 | ··package·{·'aide': |
| 203 | ····ensure·=>·'installed', | 191 | ····ensure·=>·'installed', |
| 204 | ··} | 192 | ··} |
| 205 | } | 193 | } |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | package·install·aide | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | package·--add=aide | ||
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 208 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 210 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 210 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 211 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 211 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 212 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 360, 56 lines modified | Offset 360, 56 lines modified | ||
| 360 | ···························7.6 | 360 | ···························7.6 |
| 361 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 361 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 362 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 362 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 363 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 363 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 365 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 365 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 366 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 366 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 368 | [[customizations.filesystem]] | ||
| 369 | mountpoint·=·"/home" | ||
| 370 | size·=·1073741824 | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 368 | logvol·/home·1024 | 372 | logvol·/home·1024 |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 374 | part·/home | 378 | part·/home |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 376 | [[customizations.filesystem]] | ||
| 377 | mountpoint·=·"/home" | ||
| 378 | size·=·1073741824 | ||
| 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| 382 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the | 382 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the |
| 383 | mountpoint·can·instead·be·configured·later. | 383 | mountpoint·can·instead·be·configured·later. |
| 384 | ············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is | 384 | ············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is |
| Max diff block lines reached; 147331/153560 bytes (95.94%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038690:·323 | 00038690:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14854, 217 lines modified | Offset 14854, 217 lines modified | ||
| 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | ||
| 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003a0d0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003a0d0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003a0e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a0f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a100:·6170·7365·2220·6964·3d22·6964·6d31·3036··apse"·id="idm106 | |||
| 0003a110:·3232·223e·3c74·6162·6c65·2063·6c61·7373··22"><table·class | |||
| 0003a120:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a130:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003a140:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003a150:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a160:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a170:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a180:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003a190:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003a1a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a1b0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003a1c0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a1d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003a1e0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003a1f0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003a200:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003a210:·6b61·6765·2069·6e73·7461·6c6c·2064·6e66··kage·install·dnf | |||
| 0003a220:·2d61·7574·6f6d·6174·6963·0a3c·2f63·6f64··-automatic.</cod | |||
| 0003a230:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003a240:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003a250:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003a260:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003a270:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003a280:·6d31·3036·3233·2220·7461·6269·6e64·6578··m10623"·tabindex | |||
| 0003a290:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003a2a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003a2b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003a2c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003a2d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003a2e0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003a | 0003a0e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003a | 0003a0f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003a | 0003a100:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003a | 0003a110:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003a330:·3632·3322·3e3c·7461·626c·6520·636c·6173··623"><table·clas | |||
| 0003a | 0003a120:·3130·3632·3222·3e3c·7072·653e·3c63·6f64··10622"><pre><cod | ||
| 0003a130:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003a140:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 0003a150:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 0003a160:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003a170:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003a180:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003a190:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003a1a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003a1b0:·6172·6765·743d·2223·6964·6d31·3036·3233··arget="#idm10623 | |||
| 0003a1c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003a1d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003a1e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003a1f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003a200:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003a210:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003a220:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003a230:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a240:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a250:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a260:·2069·643d·2269·646d·3130·3632·3322·3e3c···id="idm10623">< | |||
| 0003a270:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a280:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a290:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a2a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a2b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a2c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a2d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a2e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a2f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a300:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a310:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a320:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a330:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a340:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003a350:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a360:·3e3c·636f·6465·3e0a·6966·2021·2072·706d··><code>.if·!·rpm | |||
| 0003a370:·202d·7120·2d2d·7175·6965·7420·2264·6e66···-q·--quiet·"dnf | |||
| 0003a380:·2d61·7574·6f6d·6174·6963·2220·3b20·7468··-automatic"·;·th | |||
| 0003a390:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003a3a0:·6c6c·202d·7920·2264·6e66·2d61·7574·6f6d··ll·-y·"dnf-autom | |||
| 0003a3b0:·6174·6963·220a·6669·0a3c·2f63·6f64·653e··atic".fi.</code> | |||
| 0003a3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a400:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a410:·3036·3234·2220·7461·6269·6e64·6578·3d22··0624"·tabindex=" | |||
| 0003a420:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a430:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a440:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a450:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a460:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a470:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003a480:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a490:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a4a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a4b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a4c0:·3036·3234·223e·3c74·6162·6c65·2063·6c61··0624"><table·cla | |||
| 0003a4d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a4e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a | 0003a4f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003a500:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| Max diff block lines reached; 368548/398272 bytes (92.54%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 101, 21 lines modified | Offset 101, 19 lines modified | ||
| 101 | $·sudo·dnf·install·dnf-automatic | 101 | $·sudo·dnf·install·dnf-automatic |
| 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 103 | ············suitable·for·automatic,·regular·execution. | 103 | ············suitable·for·automatic,·regular·execution. |
| 104 | Severity: ··medium | 104 | Severity: ··medium |
| 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | package | 109 | [[packages]] |
| 110 | name·=·"dnf-automatic" | ||
| 111 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 119 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 117 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 133, 38 lines modified | Offset 131, 40 lines modified | ||
| 133 | ··tags: | 131 | ··tags: |
| 134 | ··-·enable_strategy | 132 | ··-·enable_strategy |
| 135 | ··-·low_complexity | 133 | ··-·low_complexity |
| 136 | ··-·low_disruption | 134 | ··-·low_disruption |
| 137 | ··-·medium_severity | 135 | ··-·medium_severity |
| 138 | ··-·no_reboot_needed | 136 | ··-·no_reboot_needed |
| 139 | ··-·package_dnf-automatic_installed | 137 | ··-·package_dnf-automatic_installed |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=dnf-automatic | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"dnf-automatic" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_dnf-automatic | 143 | include·install_dnf-automatic |
| 156 | class·install_dnf-automatic·{ | 144 | class·install_dnf-automatic·{ |
| 157 | ··package·{·'dnf-automatic': | 145 | ··package·{·'dnf-automatic': |
| 158 | ····ensure·=>·'installed', | 146 | ····ensure·=>·'installed', |
| 159 | ··} | 147 | ··} |
| 160 | } | 148 | } |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·dnf-automatic | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·--add=dnf-automatic | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 164 | automatic.conf. | 164 | automatic.conf. |
| 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 8934, 21 lines modified | Offset 8934, 14 lines modified | ||
| 8934 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 8934 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 8935 | ···························A.9.1.2 | 8935 | ···························A.9.1.2 |
| 8936 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 8936 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 8937 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 8937 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 8938 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 8938 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 8939 | ············_\x8c_\x8i_\x8s············2.1.3 | 8939 | ············_\x8c_\x8i_\x8s············2.1.3 |
| 8940 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 8940 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 8941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 8942 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8943 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8944 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8945 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 8946 | package·remove·dhcp | ||
| 8947 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8948 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8942 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8949 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8943 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8950 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8944 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8951 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 8945 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 8952 | #·CAUTION:·This·remediation·script·will·remove·dhcp | 8946 | #·CAUTION:·This·remediation·script·will·remove·dhcp |
| Offset 8978, 33 lines modified | Offset 8971, 40 lines modified | ||
| 8978 | ··-·PCI-DSSv4-2.2.4 | 8971 | ··-·PCI-DSSv4-2.2.4 |
| 8979 | ··-·disable_strategy | 8972 | ··-·disable_strategy |
| 8980 | ··-·low_complexity | 8973 | ··-·low_complexity |
| 8981 | ··-·low_disruption | 8974 | ··-·low_disruption |
| 8982 | ··-·medium_severity | 8975 | ··-·medium_severity |
| 8983 | ··-·no_reboot_needed | 8976 | ··-·no_reboot_needed |
| 8984 | ··-·package_dhcp_removed | 8977 | ··-·package_dhcp_removed |
| 8985 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8986 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8987 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8988 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 34991/40783 bytes (85.80%) of diff not shown. | |||
| Offset 14406, 15 lines modified | Offset 14406, 15 lines modified | ||
| 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 000384c0:·206f·6620·3230·323 | 000384c0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15219, 233 lines modified | Offset 15219, 233 lines modified | ||
| 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b790:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b790:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b7a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b7b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b7c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b7d0:·3237·3322·3e3c·7461·626c·6520·636c·6173··273"><table·clas | |||
| 0003b7e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b7f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b800:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b810:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b820:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b830:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b840:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b850:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b860:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b870:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b880:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b890:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b8a0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b8b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b8c0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b8d0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003b8e0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b8f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b900:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b910:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b920:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b930:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 0003b940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b9a0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b9b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b9c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b9d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9e0:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 0003b9f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ba00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ba10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ba20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ba30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ba40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ba60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ba70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ba90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003baa0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bab0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bac0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bad0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bae0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003baf0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003bb00:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003bb10:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003bb20:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003bb30:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003bb40:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003bb50:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003bb60:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003bb70:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003bb80:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003bb90:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003bba0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003bbb0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003bbc0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003bbd0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003bbe0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003bbf0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bc00:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bc10:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bc20:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bc30:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bc40:·6964·6d37·3237·3522·2074·6162·696e·6465··idm7275"·tabinde | |||
| 0003bc50:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bc60:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bc70:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bc80:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bc90:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bca0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b | 0003b7a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003b | 0003b7b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b7c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b7d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003bcf0:·646d·3732·3735·223e·3c74·6162·6c65·2063··dm7275"><table·c | |||
| 0003bd00:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bd10:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bd20:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bd30:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bd40:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd50:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd60:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b | 0003b7e0:·646d·3732·3733·223e·3c70·7265·3e3c·636f··dm7273"><pre><co | ||
| 0003b7f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b800:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b810:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b820:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b830:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b840:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b850:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b860:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| Max diff block lines reached; 4148490/4180422 bytes (99.24%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 125, 21 lines modified | Offset 125, 19 lines modified | ||
| 125 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 125 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8c_\x8i_\x8s············6.1.1 | 130 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package | 133 | [[packages]] |
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 168, 38 lines modified | Offset 166, 40 lines modified | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 169 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 170 | ··-·low_complexity | 168 | ··-·low_complexity |
| 171 | ··-·low_disruption | 169 | ··-·low_disruption |
| 172 | ··-·medium_severity | 170 | ··-·medium_severity |
| 173 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 174 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=aide | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | include·install_aide | 178 | include·install_aide |
| 191 | class·install_aide·{ | 179 | class·install_aide·{ |
| 192 | ··package·{·'aide': | 180 | ··package·{·'aide': |
| 193 | ····ensure·=>·'installed', | 181 | ····ensure·=>·'installed', |
| 194 | ··} | 182 | ··} |
| 195 | } | 183 | } |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·install·aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/sbin/aide·--init | 198 | $·sudo·/usr/sbin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 201 | To·initiate·a·manual·check,·run·the·following·command: | 201 | To·initiate·a·manual·check,·run·the·following·command: |
| 202 | $·sudo·/usr/sbin/aide·--check | 202 | $·sudo·/usr/sbin/aide·--check |
| Offset 670, 39 lines modified | Offset 670, 14 lines modified | ||
| 670 | » echo·"to·see·what·package·to·(re)install"·>&2 | 670 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 671 | » false··#·end·with·an·error·code | 671 | » false··#·end·with·an·error·code |
| 672 | elif·test·"$rc"·!=·0;·then | 672 | elif·test·"$rc"·!=·0;·then |
| 673 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 673 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 674 | » false··#·end·with·an·error·code | 674 | » false··#·end·with·an·error·code |
| 675 | fi | 675 | fi |
| 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 681 | --- | ||
| 682 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 683 | kind:·MachineConfig | ||
| 684 | spec: | ||
| 685 | ··config: | ||
| 686 | ····ignition: | ||
| 687 | ······version:·3.1.0 | ||
| 688 | ····systemd: | ||
| 689 | ······units: | ||
| 690 | ········-·name:·configure-crypto-policy.service | ||
| 691 | ··········enabled:·true | ||
| 692 | ··········contents:·| | ||
| 693 | ············[Unit] | ||
| 694 | ············Before=kubelet.service | ||
| 695 | ············[Service] | ||
| 696 | ············Type=oneshot | ||
| 697 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 698 | ············RemainAfterExit=yes | ||
| 699 | ············[Install] | ||
| 700 | ············WantedBy=multi-user.target | ||
| 701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 390923/396523 bytes (98.59%) of diff not shown. | |||
| Offset 14407, 15 lines modified | Offset 14407, 15 lines modified | ||
| 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000384d0:·323 | 000384d0:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15187, 234 lines modified | Offset 15187, 234 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20· | 0003b590:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b5a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b5b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b5a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b5b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b5c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5d0:·6522·2069·643d·2269·646d·3732·3733·223e··e"·id="idm7273"> | |||
| 0003b5e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b5f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b600:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b610:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b620:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b630:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b640:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b650:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b660:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b670:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b680:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b690:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b6a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b6c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b6d0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b6e0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b6f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b700:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b710:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b720:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b730:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b740:·2369·646d·3732·3734·2220·7461·6269·6e64··#idm7274"·tabind | |||
| 0003b750:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b760:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b770:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b780:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b790:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b7a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b7b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b7c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b7d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b7e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b7f0:·3732·3734·223e·3c74·6162·6c65·2063·6c61··7274"><table·cla | |||
| 0003b800:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b810:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b820:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b830:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b840:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b850:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b860:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b870:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b880:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b890:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b8a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b8b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b8c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b8d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b5f0:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | ||
| 0003b600:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b610:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b620:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b8f0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b900:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b910:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b920:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b930:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b940:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b950:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b960:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b970:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b980:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b990:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b9a0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b9b0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b9c0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b9d0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b9e0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b9f0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b | 0003b630:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b640:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b650:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b660:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b670:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b | 0003b680:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | ||
| 0003b | 0003b690:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003b6a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b | 0003b6b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003b6c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003b6d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6e0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b6f0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b700:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b710:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b720:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | |||
| 0003b730:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b740:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bab0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bac0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bad0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bae0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003baf0:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003bb00:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003bb10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| Max diff block lines reached; 2382995/2415065 bytes (98.67%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 21 lines modified | Offset 120, 19 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package | 128 | [[packages]] |
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 163, 38 lines modified | Offset 161, 40 lines modified | ||
| 163 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 164 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 165 | ··-·low_complexity | 163 | ··-·low_complexity |
| 166 | ··-·low_disruption | 164 | ··-·low_disruption |
| 167 | ··-·medium_severity | 165 | ··-·medium_severity |
| 168 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | 173 | include·install_aide |
| 186 | class·install_aide·{ | 174 | class·install_aide·{ |
| 187 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 188 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 189 | ··} | 177 | ··} |
| 190 | } | 178 | } |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 665, 39 lines modified | Offset 665, 14 lines modified | ||
| 665 | » echo·"to·see·what·package·to·(re)install"·>&2 | 665 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 666 | » false··#·end·with·an·error·code | 666 | » false··#·end·with·an·error·code |
| 667 | elif·test·"$rc"·!=·0;·then | 667 | elif·test·"$rc"·!=·0;·then |
| 668 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 668 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 669 | » false··#·end·with·an·error·code | 669 | » false··#·end·with·an·error·code |
| 670 | fi | 670 | fi |
| 671 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 672 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 673 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 674 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 675 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 676 | --- | ||
| 677 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 678 | kind:·MachineConfig | ||
| 679 | spec: | ||
| 680 | ··config: | ||
| 681 | ····ignition: | ||
| 682 | ······version:·3.1.0 | ||
| 683 | ····systemd: | ||
| 684 | ······units: | ||
| 685 | ········-·name:·configure-crypto-policy.service | ||
| 686 | ··········enabled:·true | ||
| 687 | ··········contents:·| | ||
| 688 | ············[Unit] | ||
| 689 | ············Before=kubelet.service | ||
| 690 | ············[Service] | ||
| 691 | ············Type=oneshot | ||
| 692 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 693 | ············RemainAfterExit=yes | ||
| 694 | ············[Install] | ||
| 695 | ············WantedBy=multi-user.target | ||
| 696 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 671 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 266415/272025 bytes (97.94%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15178, 234 lines modified | Offset 15178, 234 lines modified | ||
| 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b500:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b500:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b510:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b510:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b520:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b530:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b540:·7365·2220·6964·3d22·6964·6d37·3237·3322··se"·id="idm7273" | |||
| 0003b550:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b560:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b570:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b580:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b590:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b5a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b5b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b5c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b5d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b5e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b5f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b600:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b610:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b620:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b630:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b640:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003b650:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003b660:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b670:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b680:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b690:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b6a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b6b0:·2223·6964·6d37·3237·3422·2074·6162·696e··"#idm7274"·tabin | |||
| 0003b6c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b6d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b6e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b6f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b700:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b710:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b720:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b730:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b740:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b750:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b760:·6d37·3237·3422·3e3c·7461·626c·6520·636c··m7274"><table·cl | |||
| 0003b770:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b780:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b790:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b7a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b7b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b7c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b7d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b7e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b7f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b800:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b810:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b820:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b830:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b840:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b850:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b860:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b870:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b880:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b890:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003b8a0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b8b0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b8c0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b8d0:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003b8e0:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003b8f0:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003b900:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 0003b910:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003b920:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003b930:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003b940:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003b950:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003b960:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003b970:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b980:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b990:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b9a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b9b0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b9c0:·3237·3522·2074·6162·696e·6465·783d·2230··275"·tabindex="0 | |||
| 0003b9d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b9e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b9f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ba00:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ba10:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003ba20:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b | 0003b520:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b | 0003b530:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b540:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b550:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | ||
| 0003ba70:·3735·223e·3c74·6162·6c65·2063·6c61·7373··75"><table·class | |||
| 0003ba80:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b | 0003b560:·3733·223e·3c70·7265·3e3c·636f·6465·3e0a··73"><pre><code>. | ||
| 0003b570:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b580:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b590:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b5a0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b5b0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b5c0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b5d0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b5e0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b5f0:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b600:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b610:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b620:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b630:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| Max diff block lines reached; 2096398/2128468 bytes (98.49%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 21 lines modified | Offset 118, 19 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package | 126 | [[packages]] |
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | 134 | #·Remediation·is·applicable·only·in·certain·platforms |
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 161, 38 lines modified | Offset 159, 40 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 161 | ··-·low_complexity |
| 164 | ··-·low_disruption | 162 | ··-·low_disruption |
| 165 | ··-·medium_severity | 163 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | include·install_aide | 171 | include·install_aide |
| 184 | class·install_aide·{ | 172 | class·install_aide·{ |
| 185 | ··package·{·'aide': | 173 | ··package·{·'aide': |
| 186 | ····ensure·=>·'installed', | 174 | ····ensure·=>·'installed', |
| 187 | ··} | 175 | ··} |
| 188 | } | 176 | } |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·install·aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 194 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 195 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 663, 39 lines modified | Offset 663, 14 lines modified | ||
| 663 | » echo·"to·see·what·package·to·(re)install"·>&2 | 663 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 664 | » false··#·end·with·an·error·code | 664 | » false··#·end·with·an·error·code |
| 665 | elif·test·"$rc"·!=·0;·then | 665 | elif·test·"$rc"·!=·0;·then |
| 666 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 666 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 667 | » false··#·end·with·an·error·code | 667 | » false··#·end·with·an·error·code |
| 668 | fi | 668 | fi |
| 669 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 670 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 671 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 672 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 673 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 674 | --- | ||
| 675 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 676 | kind:·MachineConfig | ||
| 677 | spec: | ||
| 678 | ··config: | ||
| 679 | ····ignition: | ||
| 680 | ······version:·3.1.0 | ||
| 681 | ····systemd: | ||
| 682 | ······units: | ||
| 683 | ········-·name:·configure-crypto-policy.service | ||
| 684 | ··········enabled:·true | ||
| 685 | ··········contents:·| | ||
| 686 | ············[Unit] | ||
| 687 | ············Before=kubelet.service | ||
| 688 | ············[Service] | ||
| 689 | ············Type=oneshot | ||
| 690 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 691 | ············RemainAfterExit=yes | ||
| 692 | ············[Install] | ||
| 693 | ············WantedBy=multi-user.target | ||
| 694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 669 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 238800/244420 bytes (97.70%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15210, 234 lines modified | Offset 15210, 234 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b710:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b720:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b730:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b740:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b750:·6964·3d22·6964·6d37·3237·3322·3e3c·7072··id="idm7273"><pr | |||
| 0003b760:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b770:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b780:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b700:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b710:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b720:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b730:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b740:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 0003b750:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b760:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b770:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b780:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b790:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b7a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b7b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b7c0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b7d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b7e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b7f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b810:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b820:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b830:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b840:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003b850:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003b860:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b870:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b880:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b890:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b8a0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b8b0:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b8c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b8d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b8e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b8f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b900:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b910:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b920:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b950:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | |||
| 0003b960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b9a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b9b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b9c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b9d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b9e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b9f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ba00:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ba10:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ba20:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ba30:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ba40:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ba50:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003ba60:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003ba70:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003ba80:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003ba90:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003baa0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003bab0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003bac0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003bad0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003bae0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003baf0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003bb00:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003bb10:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003bb20:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003bb30:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003bb40:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003bb50:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b | 0003b790:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b7a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b7b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b7c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b7d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b7e0:·6574·3d22·2369·646d·3732·3734·2220·7461··et="#idm7274"·ta | ||
| 0003b | 0003b7f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b800:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b810:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b820:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b830:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b840:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b850:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b860:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b870:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b880:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b890:·2269·646d·3732·3734·223e·3c74·6162·6c65··"idm7274"><table | |||
| 0003b8a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b8b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b8c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b8d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b8e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bc20:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003bc30:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bc40:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 4003194/4035264 bytes (99.21%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 123, 21 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8c_\x8i_\x8s············6.1.1 | 128 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package | 131 | [[packages]] |
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 38 lines modified | Offset 164, 40 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 166 | ··-·low_complexity |
| 169 | ··-·low_disruption | 167 | ··-·low_disruption |
| 170 | ··-·medium_severity | 168 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | [[packages]] | ||
| 181 | name·=·"aide" | ||
| 182 | version·=·"*" | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | 176 | include·install_aide |
| 189 | class·install_aide·{ | 177 | class·install_aide·{ |
| 190 | ··package·{·'aide': | 178 | ··package·{·'aide': |
| 191 | ····ensure·=>·'installed', | 179 | ····ensure·=>·'installed', |
| 192 | ··} | 180 | ··} |
| 193 | } | 181 | } |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 668, 39 lines modified | Offset 668, 14 lines modified | ||
| 668 | » echo·"to·see·what·package·to·(re)install"·>&2 | 668 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 669 | » false··#·end·with·an·error·code | 669 | » false··#·end·with·an·error·code |
| 670 | elif·test·"$rc"·!=·0;·then | 670 | elif·test·"$rc"·!=·0;·then |
| 671 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 671 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 672 | » false··#·end·with·an·error·code | 672 | » false··#·end·with·an·error·code |
| 673 | fi | 673 | fi |
| 674 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 675 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 676 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 677 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 678 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 679 | --- | ||
| 680 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 681 | kind:·MachineConfig | ||
| 682 | spec: | ||
| 683 | ··config: | ||
| 684 | ····ignition: | ||
| 685 | ······version:·3.1.0 | ||
| 686 | ····systemd: | ||
| 687 | ······units: | ||
| 688 | ········-·name:·configure-crypto-policy.service | ||
| 689 | ··········enabled:·true | ||
| 690 | ··········contents:·| | ||
| 691 | ············[Unit] | ||
| 692 | ············Before=kubelet.service | ||
| 693 | ············[Service] | ||
| 694 | ············Type=oneshot | ||
| 695 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 696 | ············RemainAfterExit=yes | ||
| 697 | ············[Install] | ||
| 698 | ············WantedBy=multi-user.target | ||
| 699 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 674 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 376044/381664 bytes (98.53%) of diff not shown. | |||
| Offset 14419, 16 lines modified | Offset 14419, 16 lines modified | ||
| 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·2020·2020·2028·6173·206f·6620·3230·323 | 00038590:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 000385a0:·2d3 | 000385a0:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16690, 177 lines modified | Offset 16690, 177 lines modified | ||
| 00041310:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00041310:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00041320:·3739·3437·2220·7461·6269·6e64·6578·3d22··7947"·tabindex=" | 00041320:·3739·3437·2220·7461·6269·6e64·6578·3d22··7947"·tabindex=" | ||
| 00041330:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00041330:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00041340:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00041340:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00041350:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00041350:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00041360:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00041360:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00041370:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00041370:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00041380:·6469·6174·696f·6e20·4 | 00041380:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00041390:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 000413a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 000413b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 000413c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 000413d0:·3934·3722·3e3c·7461·626c·6520·636c·6173··947"><table·clas | |||
| 000413e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000413f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00041400:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00041410:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00041420:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00041390:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 000413a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000413b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000413c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000413d0:·646d·3739·3437·223e·3c74·6162·6c65·2063··dm7947"><table·c | |||
| 000413e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000413f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00041400:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00041410:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00041420:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00041430:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00041440:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00041450:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 000414 | 00041430:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00041470:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000414 | 00041440:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00041450:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00041460:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00041470:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00041480:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00041490:· | 00041490:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 000414a0:· | 000414a0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 000414b0:· | 000414b0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 000414c0:· | 000414c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 000414d0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 000414e0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 000414f0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 00041500:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 00041510:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 00041520:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 00041530:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 00041540:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 00041550:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 00041560:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 00041570:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 00041580:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 00041590:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 000415a0:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 000415b0:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 000415c0:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 000415d0:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 000415e0:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 000415f0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 00041600:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 00041610:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 00041620:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 00041630:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 00041640:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 00041650:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 00041660:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 00041670:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 00041680:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 00041690:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 000416a0:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 000416b0:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 000416c0:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 000416d0:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 000416e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000416f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00041700:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00041710:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00041720:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 00041730:·3438·2220·7461·6269·6e64·6578·3d22·3022··48"·tabindex="0" | |||
| 00041740:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00041750:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00041760:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00041770:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00041780:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00041790:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000417a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000417b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000417c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000417d0:·6170·7365·2220·6964·3d22·6964·6d37·3934··apse"·id="idm794 | |||
| 000417e0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 000417f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00041800:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041810:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00041820:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00041830:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041840:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041850:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041860:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041870:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00041880:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00041890:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 000418a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000418b0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 000418c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 000418d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00041 | 000414d0:·206e·616d·653a·2058·4343·4446·2056·616c···name:·XCCDF·Val | ||
| 00041 | 000414e0:·7565·2076·6172·5f73·7973·7465·6d5f·6372··ue·var_system_cr | ||
| 00041 | 000414f0:·7970·746f·5f70·6f6c·6963·7920·2320·7072··ypto_policy·#·pr | ||
| Max diff block lines reached; 1600331/1624673 bytes (98.50%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:10 | 63 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 64 | ····*·cpe:/o:centos:centos:10 | 64 | ····*·cpe:/o:centos:centos:10 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 449, 39 lines modified | Offset 449, 14 lines modified | ||
| 449 | » echo·"to·see·what·package·to·(re)install"·>&2 | 449 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 450 | » false··#·end·with·an·error·code | 450 | » false··#·end·with·an·error·code |
| 451 | elif·test·"$rc"·!=·0;·then | 451 | elif·test·"$rc"·!=·0;·then |
| 452 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 452 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 453 | » false··#·end·with·an·error·code | 453 | » false··#·end·with·an·error·code |
| 454 | fi | 454 | fi |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 460 | --- | ||
| 461 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 462 | kind:·MachineConfig | ||
| 463 | spec: | ||
| 464 | ··config: | ||
| 465 | ····ignition: | ||
| 466 | ······version:·3.1.0 | ||
| 467 | ····systemd: | ||
| 468 | ······units: | ||
| 469 | ········-·name:·configure-crypto-policy.service | ||
| 470 | ··········enabled:·true | ||
| 471 | ··········contents:·| | ||
| 472 | ············[Unit] | ||
| 473 | ············Before=kubelet.service | ||
| 474 | ············[Service] | ||
| 475 | ············Type=oneshot | ||
| 476 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 477 | ············RemainAfterExit=yes | ||
| 478 | ············[Install] | ||
| 479 | ············WantedBy=multi-user.target | ||
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 485 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 460 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 486 | ··set_fact: | 461 | ··set_fact: |
| Offset 524, 14 lines modified | Offset 499, 39 lines modified | ||
| 524 | ··-·PCI-DSSv4-2.2.7 | 499 | ··-·PCI-DSSv4-2.2.7 |
| 525 | ··-·configure_crypto_policy | 500 | ··-·configure_crypto_policy |
| 526 | ··-·high_severity | 501 | ··-·high_severity |
| 527 | ··-·low_complexity | 502 | ··-·low_complexity |
| 528 | ··-·low_disruption | 503 | ··-·low_disruption |
| 529 | ··-·no_reboot_needed | 504 | ··-·no_reboot_needed |
| 530 | ··-·restrict_strategy | 505 | ··-·restrict_strategy |
| 506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 507 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 508 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 509 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 510 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 511 | --- | ||
| 512 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 513 | kind:·MachineConfig | ||
| 514 | spec: | ||
| 515 | ··config: | ||
| 516 | ····ignition: | ||
| 517 | ······version:·3.1.0 | ||
| 518 | ····systemd: | ||
| 519 | ······units: | ||
| 520 | ········-·name:·configure-crypto-policy.service | ||
| 521 | ··········enabled:·true | ||
| 522 | ··········contents:·| | ||
| 523 | ············[Unit] | ||
| 524 | ············Before=kubelet.service | ||
| 525 | ············[Service] | ||
| 526 | ············Type=oneshot | ||
| 527 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 528 | ············RemainAfterExit=yes | ||
| 529 | ············[Install] | ||
| 530 | ············WantedBy=multi-user.target | ||
| 531 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 531 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 532 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 532 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 533 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 533 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 534 | Severity: ··medium | 534 | Severity: ··medium |
| 535 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 535 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 536 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 536 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 537 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 537 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 856, 21 lines modified | Offset 856, 19 lines modified | ||
| 856 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 856 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 857 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 857 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 858 | The·rear·package·can·be·installed·with·the·following·command: | 858 | The·rear·package·can·be·installed·with·the·following·command: |
| 859 | $·sudo·dnf·install·rear | 859 | $·sudo·dnf·install·rear |
| 860 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 860 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 861 | Severity: ·medium | 861 | Severity: ·medium |
| 862 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 862 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 868 | package | 864 | [[packages]] |
| 865 | name·=·"rear" | ||
| 866 | version·=·"*" | ||
| 869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 871 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 872 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 873 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 874 | #·Remediation·is·applicable·only·in·certain·platforms | 872 | #·Remediation·is·applicable·only·in·certain·platforms |
| 875 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 873 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 899, 38 lines modified | Offset 897, 40 lines modified | ||
| 899 | ··tags: | 897 | ··tags: |
| 900 | ··-·enable_strategy | 898 | ··-·enable_strategy |
| 901 | ··-·low_complexity | 899 | ··-·low_complexity |
| 902 | ··-·low_disruption | 900 | ··-·low_disruption |
| 903 | ··-·medium_severity | 901 | ··-·medium_severity |
| 904 | ··-·no_reboot_needed | 902 | ··-·no_reboot_needed |
| Max diff block lines reached; 142267/149035 bytes (95.46%) of diff not shown. | |||
| Offset 14439, 15 lines modified | Offset 14439, 15 lines modified | ||
| 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000386d0:·7320·6f66·2032·3032·3 | 000386d0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16755, 175 lines modified | Offset 16755, 175 lines modified | ||
| 00041720:·6574·3d22·2369·646d·3739·3437·2220·7461··et="#idm7947"·ta | 00041720:·6574·3d22·2369·646d·3739·3437·2220·7461··et="#idm7947"·ta | ||
| 00041730:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00041730:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00041740:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00041740:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00041750:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00041750:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00041760:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00041760:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00041770:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00041770:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00041780:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00041780:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00041790:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000417a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000417b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000417c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000417d0:·6964·3d22·6964·6d37·3934·3722·3e3c·7461··id="idm7947"><ta | |||
| 000417e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000417f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00041800:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00041810:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00041820:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00041790:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 000417a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000417b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000417c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000417d0:·6522·2069·643d·2269·646d·3739·3437·223e··e"·id="idm7947"> | |||
| 000417e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000417f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041800:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00041810:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00041820:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00041830:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00041840:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00041850:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000418 | 00041830:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 000418 | 00041840:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 000418 | 00041850:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 00041860:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041870:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00041880:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00041890:· | 00041890:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 000418a0:· | 000418a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 000418b0:· | 000418b0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 000418c0:· | 000418c0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 000418d0:·7265·3e3c·636f·6465·3e2d·2d2d·0a61·7069··re><code>---.api | |||
| 000418e0:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 000418f0:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 00041900:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 00041910:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 00041920:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 00041930:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| 00041940:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | |||
| 00041950:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | |||
| 00041960:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | |||
| 00041970:·2020·2020·2020·202d·206e·616d·653a·2063·········-·name:·c | |||
| 00041980:·6f6e·6669·6775·7265·2d63·7279·7074·6f2d··onfigure-crypto- | |||
| 00041990:·706f·6c69·6379·2e73·6572·7669·6365·0a20··policy.service.· | |||
| 000419a0:·2020·2020·2020·2020·2065·6e61·626c·6564···········enabled | |||
| 000419b0:·3a20·7472·7565·0a20·2020·2020·2020·2020··:·true.········· | |||
| 000419c0:·2063·6f6e·7465·6e74·733a·207c·0a20·2020···contents:·|.··· | |||
| 000419d0:·2020·2020·2020·2020·205b·556e·6974·5d0a···········[Unit]. | |||
| 000419e0:·2020·2020·2020·2020·2020·2020·4265·666f··············Befo | |||
| 000419f0:·7265·3d6b·7562·656c·6574·2e73·6572·7669··re=kubelet.servi | |||
| 00041a00:·6365·0a20·2020·2020·2020·2020·2020·205b··ce.············[ | |||
| 00041a10:·5365·7276·6963·655d·0a20·2020·2020·2020··Service].······· | |||
| 00041a20:·2020·2020·2054·7970·653d·6f6e·6573·686f·······Type=onesho | |||
| 00041a30:·740a·2020·2020·2020·2020·2020·2020·4578··t.············Ex | |||
| 00041a40:·6563·5374·6172·743d·7570·6461·7465·2d63··ecStart=update-c | |||
| 00041a50:·7279·7074·6f2d·706f·6c69·6369·6573·202d··rypto-policies·- | |||
| 00041a60:·2d73·6574·207b·7b2e·7661·725f·7379·7374··-set·{{.var_syst | |||
| 00041a70:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 00041a80:·7d7d·0a20·2020·2020·2020·2020·2020·2052··}}.············R | |||
| 00041a90:·656d·6169·6e41·6674·6572·4578·6974·3d79··emainAfterExit=y | |||
| 00041aa0:·6573·0a20·2020·2020·2020·2020·2020·205b··es.············[ | |||
| 00041ab0:·496e·7374·616c·6c5d·0a20·2020·2020·2020··Install].······· | |||
| 00041ac0:·2020·2020·2057·616e·7465·6442·793d·6d75·······WantedBy=mu | |||
| 00041ad0:·6c74·692d·7573·6572·2e74·6172·6765·740a··lti-user.target. | |||
| 00041ae0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00041af0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00041b00:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00041b10:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00041b20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00041b30:·3d22·2369·646d·3739·3438·2220·7461·6269··="#idm7948"·tabi | |||
| 00041b40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00041b50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00041b60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00041b70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00041b80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00041b90:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 00041ba0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00041bb0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00041bc0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00041bd0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00041be0:·3d22·6964·6d37·3934·3822·3e3c·7461·626c··="idm7948"><tabl | |||
| 00041bf0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00041c00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00041c10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00041c20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00041c30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00041c40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00041c50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00041c60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00041c70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041c80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00041c90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00041ca0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00041cb0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00041cc0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 00041cd0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00041 | 000418d0:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | ||
| 00041 | 000418e0:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | ||
| 00041 | 000418f0:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 00041 | 00041900:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 00041 | 00041910:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| 00041 | 00041920:·6661·6374·3a0a·2020·2020·7661·725f·7379··fact:.····var_sy | ||
| Max diff block lines reached; 2442615/2466543 bytes (99.03%) of diff not shown. | |||
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ··············(HIPAA) | 66 | ··············(HIPAA) |
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 69 | ····*·cpe:/o:redhat:enterprise_linux:10 | 69 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 70 | ····*·cpe:/o:centos:centos:10 | 70 | ····*·cpe:/o:centos:centos:10 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 464, 39 lines modified | Offset 464, 14 lines modified | ||
| 464 | » echo·"to·see·what·package·to·(re)install"·>&2 | 464 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 465 | » false··#·end·with·an·error·code | 465 | » false··#·end·with·an·error·code |
| 466 | elif·test·"$rc"·!=·0;·then | 466 | elif·test·"$rc"·!=·0;·then |
| 467 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 467 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 468 | » false··#·end·with·an·error·code | 468 | » false··#·end·with·an·error·code |
| 469 | fi | 469 | fi |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 475 | --- | ||
| 476 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 477 | kind:·MachineConfig | ||
| 478 | spec: | ||
| 479 | ··config: | ||
| 480 | ····ignition: | ||
| 481 | ······version:·3.1.0 | ||
| 482 | ····systemd: | ||
| 483 | ······units: | ||
| 484 | ········-·name:·configure-crypto-policy.service | ||
| 485 | ··········enabled:·true | ||
| 486 | ··········contents:·| | ||
| 487 | ············[Unit] | ||
| 488 | ············Before=kubelet.service | ||
| 489 | ············[Service] | ||
| 490 | ············Type=oneshot | ||
| 491 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 492 | ············RemainAfterExit=yes | ||
| 493 | ············[Install] | ||
| 494 | ············WantedBy=multi-user.target | ||
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 500 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 475 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 501 | ··set_fact: | 476 | ··set_fact: |
| Offset 539, 14 lines modified | Offset 514, 39 lines modified | ||
| 539 | ··-·PCI-DSSv4-2.2.7 | 514 | ··-·PCI-DSSv4-2.2.7 |
| 540 | ··-·configure_crypto_policy | 515 | ··-·configure_crypto_policy |
| 541 | ··-·high_severity | 516 | ··-·high_severity |
| 542 | ··-·low_complexity | 517 | ··-·low_complexity |
| 543 | ··-·low_disruption | 518 | ··-·low_disruption |
| 544 | ··-·no_reboot_needed | 519 | ··-·no_reboot_needed |
| 545 | ··-·restrict_strategy | 520 | ··-·restrict_strategy |
| 521 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 522 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 523 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 524 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 525 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 526 | --- | ||
| 527 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 528 | kind:·MachineConfig | ||
| 529 | spec: | ||
| 530 | ··config: | ||
| 531 | ····ignition: | ||
| 532 | ······version:·3.1.0 | ||
| 533 | ····systemd: | ||
| 534 | ······units: | ||
| 535 | ········-·name:·configure-crypto-policy.service | ||
| 536 | ··········enabled:·true | ||
| 537 | ··········contents:·| | ||
| 538 | ············[Unit] | ||
| 539 | ············Before=kubelet.service | ||
| 540 | ············[Service] | ||
| 541 | ············Type=oneshot | ||
| 542 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 543 | ············RemainAfterExit=yes | ||
| 544 | ············[Install] | ||
| 545 | ············WantedBy=multi-user.target | ||
| 546 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 546 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 547 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 547 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 548 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 548 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 549 | Severity: ··medium | 549 | Severity: ··medium |
| 550 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 550 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 551 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 551 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 552 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 552 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 634, 29 lines modified | Offset 634, 29 lines modified | ||
| 634 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) | 634 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) |
| 635 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 | 635 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 |
| 636 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 636 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 | 637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 |
| 638 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 | 638 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 |
| 639 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 639 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 640 | ············_\x8c_\x8i_\x8s············1.1.2.7.1 | 640 | ············_\x8c_\x8i_\x8s············1.1.2.7.1 |
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 642 | [[customizations.filesystem]] | ||
| 643 | mountpoint·=·"/var/log/audit" | ||
| 644 | size·=·10737418240 | ||
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 642 | logvol·/var/log/audit·10240 | 646 | logvol·/var/log/audit·10240 |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 648 | part·/var/log/audit | 652 | part·/var/log/audit |
| 649 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 650 | [[customizations.filesystem]] | ||
| 651 | mountpoint·=·"/var/log/audit" | ||
| 652 | size·=·10737418240 | ||
| 653 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules | 653 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules |
| 654 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 654 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 655 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. | 655 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. |
| Max diff block lines reached; 202501/208570 bytes (97.09%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038610:·7320·6f66·2032·3032·3 | 00038610:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16549, 234 lines modified | Offset 16549, 234 lines modified | ||
| 00040a40:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 00040a40:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 00040a50:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 00040a50:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 00040a60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00040a60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00040a70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00040a70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00040a80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00040a80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00040a90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00040a90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00040aa0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00040aa0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00040ab0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 00040ac0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00040ad0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040ae0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040af0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040b00:·2069·643d·2269·646d·3732·3733·223e·3c70···id="idm7273"><p | |||
| 00040b10:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00040b20:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 00040b30:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 00040ab0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 00040ac0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040ad0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040ae0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040af0:·3d22·6964·6d37·3237·3322·3e3c·7461·626c··="idm7273"><tabl | |||
| 00040b00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040b10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040b20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040b30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040b40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040b50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040b60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040b70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040b80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040b90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040ba0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040bb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040bc0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040bd0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040be0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040bf0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 00040c00:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 00040c10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040c20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040c30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040c40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040c50:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00040c60:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 00040c70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00040c80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00040c90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00040ca0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00040cb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00040cc0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00040cd0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00040ce0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00040cf0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00040d00:·7365·2220·6964·3d22·6964·6d37·3237·3422··se"·id="idm7274" | |||
| 00040d10:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00040d20:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00040d30:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00040d40:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00040d50:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00040d60:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00040d70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00040d80:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00040d90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040da0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00040db0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00040dc0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00040dd0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00040de0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00040df0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00040e00:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 00040e10:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 00040e20:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 00040e30:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 00040e40:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 00040e50:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 00040e60:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 00040e70:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 00040e80:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 00040e90:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 00040ea0:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 00040eb0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 00040ec0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 00040ed0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 00040ee0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 00040ef0:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 00040f00:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 00040 | 00040b40:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 00040 | 00040b50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 00040 | 00040b60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 00040 | 00040b70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 00040 | 00040b80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 00040 | 00040b90:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | ||
| 00040 | 00040ba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040 | 00040bb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040 | 00040bc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040 | 00040bd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040 | 00040be0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 00040 | 00040bf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 00040c00:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 00040c10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040c20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040c30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040c40:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 00040c50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040c60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040c70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040c80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040c90:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040fd0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 00040fe0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040ff0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| Max diff block lines reached; 2454834/2486904 bytes (98.71%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Base | 63 | ··············Base |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 436, 21 lines modified | Offset 436, 19 lines modified | ||
| 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ············_\x8c_\x8i_\x8s············6.1.1 | 441 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package | 444 | [[packages]] |
| 445 | name·=·"aide" | ||
| 446 | version·=·"*" | ||
| 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 454 | #·Remediation·is·applicable·only·in·certain·platforms | 452 | #·Remediation·is·applicable·only·in·certain·platforms |
| 455 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 453 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 479, 38 lines modified | Offset 477, 40 lines modified | ||
| 479 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 480 | ··-·enable_strategy | 478 | ··-·enable_strategy |
| 481 | ··-·low_complexity | 479 | ··-·low_complexity |
| 482 | ··-·low_disruption | 480 | ··-·low_disruption |
| 483 | ··-·medium_severity | 481 | ··-·medium_severity |
| 484 | ··-·no_reboot_needed | 482 | ··-·no_reboot_needed |
| 485 | ··-·package_aide_installed | 483 | ··-·package_aide_installed |
| 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 491 | package·--add=aide | ||
| 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 493 | [[packages]] | ||
| 494 | name·=·"aide" | ||
| 495 | version·=·"*" | ||
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 485 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 486 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 487 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 488 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 501 | include·install_aide | 489 | include·install_aide |
| 502 | class·install_aide·{ | 490 | class·install_aide·{ |
| 503 | ··package·{·'aide': | 491 | ··package·{·'aide': |
| 504 | ····ensure·=>·'installed', | 492 | ····ensure·=>·'installed', |
| 505 | ··} | 493 | ··} |
| 506 | } | 494 | } |
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 500 | package·install·aide | ||
| 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 502 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 503 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 504 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 505 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 506 | package·--add=aide | ||
| 507 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 507 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 508 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 508 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 509 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 509 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 510 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 510 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ············_\x8i_\x8s_\x8m······1446 | 624 | ············_\x8i_\x8s_\x8m······1446 |
| 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 630 | #·Remediation·is·applicable·only·in·certain·platforms | 633 | #·Remediation·is·applicable·only·in·certain·platforms |
| 631 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 634 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 632 | var_system_crypto_policy='FIPS' | 635 | var_system_crypto_policy='FIPS' |
| Offset 752, 18 lines modified | Offset 756, 14 lines modified | ||
| 752 | ··-·NIST-800-53-SC-13 | 756 | ··-·NIST-800-53-SC-13 |
| 753 | ··-·enable_fips_mode | 757 | ··-·enable_fips_mode |
| 754 | ··-·high_severity | 758 | ··-·high_severity |
| 755 | ··-·medium_complexity | 759 | ··-·medium_complexity |
| 756 | ··-·medium_disruption | 760 | ··-·medium_disruption |
| 757 | ··-·reboot_required | 761 | ··-·reboot_required |
| 758 | ··-·restrict_strategy | 762 | ··-·restrict_strategy |
| 759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 760 | [customizations] | ||
| 761 | fips·=·true | ||
| 762 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 763 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 763 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 764 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 764 | ····*·GnuTLS·library | 765 | ····*·GnuTLS·library |
| Max diff block lines reached; 228888/235882 bytes (97.03%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038650:·206f·6620·3230·323 | 00038650:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16553, 234 lines modified | Offset 16553, 234 lines modified | ||
| 00040a80:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 00040a80:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 00040a90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 00040a90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 00040aa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00040aa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00040ab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00040ab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00040ac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00040ac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00040ad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00040ad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00040ae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00040ae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00040af0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 00040b00:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00040b10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040b20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040b30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040b40:·6964·3d22·6964·6d37·3237·3322·3e3c·7072··id="idm7273"><pr | |||
| 00040b50:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00040b60:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 00040b70:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 00040af0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 00040b00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00040b10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00040b20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00040b30:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 00040b40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00040b50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040b60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040b70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040b80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040b90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040ba0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040bb0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040bc0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040bd0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040be0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00040bf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00040c00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00040c10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00040c20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00040c30:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 00040c40:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 00040c50:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040c60:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040c70:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040c80:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040c90:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 00040ca0:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 00040cb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040cc0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040cd0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040ce0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040cf0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040d00:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00040d10:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00040d20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00040d30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00040d40:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | |||
| 00040d50:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00040d60:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00040d70:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00040d80:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00040d90:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00040da0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040db0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040dc0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040dd0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040de0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00040df0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00040e00:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00040e10:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00040e20:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00040e30:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00040e40:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 00040e50:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 00040e60:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00040e70:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00040e80:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 00040e90:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 00040ea0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 00040eb0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 00040ec0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 00040ed0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 00040ee0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 00040ef0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 00040f00:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 00040f10:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 00040f20:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 00040f30:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 00040f40:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 00040 | 00040b80:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 00040 | 00040b90:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 00040 | 00040ba0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 00040 | 00040bb0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 00040 | 00040bc0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 00040 | 00040bd0:·6574·3d22·2369·646d·3732·3734·2220·7461··et="#idm7274"·ta | ||
| 00040 | 00040be0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00040 | 00040bf0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00040 | 00040c00:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00040 | 00040c10:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00040 | 00040c20:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004 | 00040c30:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00040c40:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 00040c50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00040c60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00040c70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00040c80:·2269·646d·3732·3734·223e·3c74·6162·6c65··"idm7274"><table | |||
| 00040c90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00040ca0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040cb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040cc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040cd0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041010:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00041020:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00041030:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 2454903/2486973 bytes (98.71%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ··············Secret | 64 | ··············Secret |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 437, 21 lines modified | Offset 437, 19 lines modified | ||
| 437 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 437 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 438 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 438 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 441 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 441 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 442 | ············_\x8c_\x8i_\x8s············6.1.1 | 442 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 443 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 443 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 449 | package | 445 | [[packages]] |
| 446 | name·=·"aide" | ||
| 447 | version·=·"*" | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 455 | #·Remediation·is·applicable·only·in·certain·platforms | 453 | #·Remediation·is·applicable·only·in·certain·platforms |
| 456 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 454 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 480, 38 lines modified | Offset 478, 40 lines modified | ||
| 480 | ··-·PCI-DSSv4-11.5.2 | 478 | ··-·PCI-DSSv4-11.5.2 |
| 481 | ··-·enable_strategy | 479 | ··-·enable_strategy |
| 482 | ··-·low_complexity | 480 | ··-·low_complexity |
| 483 | ··-·low_disruption | 481 | ··-·low_disruption |
| 484 | ··-·medium_severity | 482 | ··-·medium_severity |
| 485 | ··-·no_reboot_needed | 483 | ··-·no_reboot_needed |
| 486 | ··-·package_aide_installed | 484 | ··-·package_aide_installed |
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 492 | package·--add=aide | ||
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 494 | [[packages]] | ||
| 495 | name·=·"aide" | ||
| 496 | version·=·"*" | ||
| 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 502 | include·install_aide | 490 | include·install_aide |
| 503 | class·install_aide·{ | 491 | class·install_aide·{ |
| 504 | ··package·{·'aide': | 492 | ··package·{·'aide': |
| 505 | ····ensure·=>·'installed', | 493 | ····ensure·=>·'installed', |
| 506 | ··} | 494 | ··} |
| 507 | } | 495 | } |
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 501 | package·install·aide | ||
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 503 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 504 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 505 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 506 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 507 | package·--add=aide | ||
| 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 623, 14 lines modified | Offset 623, 18 lines modified | ||
| 623 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 623 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 624 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 624 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 625 | ············_\x8i_\x8s_\x8m······1446 | 625 | ············_\x8i_\x8s_\x8m······1446 |
| 626 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 626 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 627 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 627 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 628 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 628 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 631 | [customizations] | ||
| 632 | fips·=·true | ||
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 631 | #·Remediation·is·applicable·only·in·certain·platforms | 634 | #·Remediation·is·applicable·only·in·certain·platforms |
| 632 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 635 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 633 | var_system_crypto_policy='FIPS' | 636 | var_system_crypto_policy='FIPS' |
| Offset 753, 18 lines modified | Offset 757, 14 lines modified | ||
| 753 | ··-·NIST-800-53-SC-13 | 757 | ··-·NIST-800-53-SC-13 |
| 754 | ··-·enable_fips_mode | 758 | ··-·enable_fips_mode |
| 755 | ··-·high_severity | 759 | ··-·high_severity |
| 756 | ··-·medium_complexity | 760 | ··-·medium_complexity |
| 757 | ··-·medium_disruption | 761 | ··-·medium_disruption |
| 758 | ··-·reboot_required | 762 | ··-·reboot_required |
| 759 | ··-·restrict_strategy | 763 | ··-·restrict_strategy |
| 760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 761 | [customizations] | ||
| 762 | fips·=·true | ||
| 763 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 764 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 764 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 765 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 765 | ····*·GnuTLS·library | 766 | ····*·GnuTLS·library |
| Max diff block lines reached; 228888/235891 bytes (97.03%) of diff not shown. | |||
| Offset 14428, 16 lines modified | Offset 14428, 16 lines modified | ||
| 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038620:·2020·2020·2028·6173·206f·6620·3230·323 | 00038620:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00038630:·2d3 | 00038630:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16550, 234 lines modified | Offset 16550, 234 lines modified | ||
| 00040a50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040a50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040a60:·3d22·2369·646d·3732·3733·2220·7461·6269··="#idm7273"·tabi | 00040a60:·3d22·2369·646d·3732·3733·2220·7461·6269··="#idm7273"·tabi | ||
| 00040a70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00040a70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00040a80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00040a80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00040a90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00040a90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00040aa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00040aa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00040ab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00040ab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00040ac0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 00040ad0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00040ae0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040af0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040b00:·7073·6522·2069·643d·2269·646d·3732·3733··pse"·id="idm7273 | |||
| 00040b10:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040b20:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040b30:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040b40:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040b50:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040b60:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040b70:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040b80:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00040b90:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040ba0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00040bb0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00040bc0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00040bd0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00040be0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00040bf0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00040c00:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 00040c10:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 00040c20:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00040c30:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00040c40:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00040c50:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00040c60:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00040c70:·3d22·2369·646d·3732·3734·2220·7461·6269··="#idm7274"·tabi | |||
| 00040c80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00040c90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00040ca0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00040cb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00040cc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00040 | 00040ac0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00040ad0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00040ae0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040af0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040b00:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040b10:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040ce0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 00040cf0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040d00:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040d10:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00040d20:·646d·3732·3734·223e·3c74·6162·6c65·2063··dm7274"><table·c | |||
| 00040d30:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040d40:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040d50:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040d60:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040d70:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040d80:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040d90:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00040da0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00040db0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00040dc0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00040dd0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00040de0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00040df0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00040e00:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00040 | 00040b20:·3237·3322·3e3c·7072·653e·3c63·6f64·653e··273"><pre><code> | ||
| 00040b30:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00040b40:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 00040b50:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00040e20:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 00040e30:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 00040e40:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 00040e50:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 00040e60:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 00040e70:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 00040e80:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 00040e90:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 00040ea0:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 00040eb0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 00040ec0:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 00040ed0:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 00040ee0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 00040ef0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 00040f00:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 00040f10:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 00040f20:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 00040 | 00040b60:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 00040 | 00040b70:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 00040 | 00040b80:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 00040 | 00040b90:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 00040 | 00040ba0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00040 | 00040bb0:·3732·3734·2220·7461·6269·6e64·6578·3d22··7274"·tabindex=" | ||
| 00040 | 00040bc0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00040 | 00040bd0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00040 | 00040be0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00040 | 00040bf0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00040 | 00040c00:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00040c10:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 00040c20:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00040c30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040c40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040c50:·7073·6522·2069·643d·2269·646d·3732·3734··pse"·id="idm7274 | |||
| 00040c60:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040c70:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040fe0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00040ff0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00041000:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00041010:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00041020:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00041030:·3237·3522·3e3c·7461·626c·6520·636c·6173··275"><table·clas | |||
| Max diff block lines reached; 2455179/2487387 bytes (98.71%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Top·Secret | 63 | ··············Top·Secret |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 436, 21 lines modified | Offset 436, 19 lines modified | ||
| 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ············_\x8c_\x8i_\x8s············6.1.1 | 441 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package | 444 | [[packages]] |
| 445 | name·=·"aide" | ||
| 446 | version·=·"*" | ||
| 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 454 | #·Remediation·is·applicable·only·in·certain·platforms | 452 | #·Remediation·is·applicable·only·in·certain·platforms |
| 455 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 453 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 479, 38 lines modified | Offset 477, 40 lines modified | ||
| 479 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 480 | ··-·enable_strategy | 478 | ··-·enable_strategy |
| 481 | ··-·low_complexity | 479 | ··-·low_complexity |
| 482 | ··-·low_disruption | 480 | ··-·low_disruption |
| 483 | ··-·medium_severity | 481 | ··-·medium_severity |
| 484 | ··-·no_reboot_needed | 482 | ··-·no_reboot_needed |
| 485 | ··-·package_aide_installed | 483 | ··-·package_aide_installed |
| 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 491 | package·--add=aide | ||
| 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 493 | [[packages]] | ||
| 494 | name·=·"aide" | ||
| 495 | version·=·"*" | ||
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 485 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 486 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 487 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 488 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 501 | include·install_aide | 489 | include·install_aide |
| 502 | class·install_aide·{ | 490 | class·install_aide·{ |
| 503 | ··package·{·'aide': | 491 | ··package·{·'aide': |
| 504 | ····ensure·=>·'installed', | 492 | ····ensure·=>·'installed', |
| 505 | ··} | 493 | ··} |
| 506 | } | 494 | } |
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 500 | package·install·aide | ||
| 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 502 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 503 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 504 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 505 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 506 | package·--add=aide | ||
| 507 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 507 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 508 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 508 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 509 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 509 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 510 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 510 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ············_\x8i_\x8s_\x8m······1446 | 624 | ············_\x8i_\x8s_\x8m······1446 |
| 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 630 | #·Remediation·is·applicable·only·in·certain·platforms | 633 | #·Remediation·is·applicable·only·in·certain·platforms |
| 631 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 634 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 632 | var_system_crypto_policy='FIPS' | 635 | var_system_crypto_policy='FIPS' |
| Offset 752, 18 lines modified | Offset 756, 14 lines modified | ||
| 752 | ··-·NIST-800-53-SC-13 | 756 | ··-·NIST-800-53-SC-13 |
| 753 | ··-·enable_fips_mode | 757 | ··-·enable_fips_mode |
| 754 | ··-·high_severity | 758 | ··-·high_severity |
| 755 | ··-·medium_complexity | 759 | ··-·medium_complexity |
| 756 | ··-·medium_disruption | 760 | ··-·medium_disruption |
| 757 | ··-·reboot_required | 761 | ··-·reboot_required |
| 758 | ··-·restrict_strategy | 762 | ··-·restrict_strategy |
| 759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 760 | [customizations] | ||
| 761 | fips·=·true | ||
| 762 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 763 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 763 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 764 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 764 | ····*·GnuTLS·library | 765 | ····*·GnuTLS·library |
| Max diff block lines reached; 228888/235899 bytes (97.03%) of diff not shown. | |||
| Offset 14421, 15 lines modified | Offset 14421, 15 lines modified | ||
| 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385b0:·3230·323 | 000385b0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16532, 233 lines modified | Offset 16532, 233 lines modified | ||
| 00040930:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 00040930:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 00040940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00040940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00040950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00040960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00040970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00040980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 00040990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00040990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000409a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 000409a0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 000409b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 000409c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 000409d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 000409e0:·3237·3322·3e3c·7461·626c·6520·636c·6173··273"><table·clas | |||
| 000409f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00040a00:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00040a10:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00040a20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00040a30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00040a40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040a50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00040a60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00040a70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040a80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00040a90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00040aa0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00040ab0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00040ac0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00040ad0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 00040ae0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 00040af0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 00040b00:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00040b10:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00040b20:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040b30:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040b40:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 00040b50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040b60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040b70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040b80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040b90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040ba0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040bb0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 00040bc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040bd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040be0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040bf0:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 00040c00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040c10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040c20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040c30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040c40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040c50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040c70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040c80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040c90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040ca0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040cb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040cc0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040cd0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040ce0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040cf0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 00040d00:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 00040d10:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 00040d20:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 00040d30:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 00040d40:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 00040d50:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 00040d60:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 00040d70:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 00040d80:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 00040d90:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 00040da0:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 00040db0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 00040dc0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 00040dd0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 00040de0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 00040df0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 00040e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00040e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00040e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00040e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00040e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00040e50:·6964·6d37·3237·3522·2074·6162·696e·6465··idm7275"·tabinde | |||
| 00040e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00040e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00040e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00040e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00040ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00040eb0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 00040 | 000409b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 00040 | 000409c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 00040 | 000409d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 00040 | 000409e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 00040f00:·646d·3732·3735·223e·3c74·6162·6c65·2063··dm7275"><table·c | |||
| 00040f10:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040f20:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040f30:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040f40:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040f50:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040f60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040f70:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00040 | 000409f0:·646d·3732·3733·223e·3c70·7265·3e3c·636f··dm7273"><pre><co | ||
| 00040a00:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 00040a10:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 00040a20:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00040a30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00040a40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00040a50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00040a60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00040a70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| Max diff block lines reached; 2478881/2510813 bytes (98.73%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | ··············Linux·10 | 62 | ··············Linux·10 |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:10 | 65 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 66 | ····*·cpe:/o:centos:centos:10 | 66 | ····*·cpe:/o:centos:centos:10 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 433, 21 lines modified | Offset 433, 19 lines modified | ||
| 433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 435 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 435 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 437 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 437 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 438 | ············_\x8c_\x8i_\x8s············6.1.1 | 438 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | package | 441 | [[packages]] |
| 442 | name·=·"aide" | ||
| 443 | version·=·"*" | ||
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 451 | #·Remediation·is·applicable·only·in·certain·platforms | 449 | #·Remediation·is·applicable·only·in·certain·platforms |
| 452 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 450 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 476, 38 lines modified | Offset 474, 40 lines modified | ||
| 476 | ··-·PCI-DSSv4-11.5.2 | 474 | ··-·PCI-DSSv4-11.5.2 |
| 477 | ··-·enable_strategy | 475 | ··-·enable_strategy |
| 478 | ··-·low_complexity | 476 | ··-·low_complexity |
| 479 | ··-·low_disruption | 477 | ··-·low_disruption |
| 480 | ··-·medium_severity | 478 | ··-·medium_severity |
| 481 | ··-·no_reboot_needed | 479 | ··-·no_reboot_needed |
| 482 | ··-·package_aide_installed | 480 | ··-·package_aide_installed |
| 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 488 | package·--add=aide | ||
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 490 | [[packages]] | ||
| 491 | name·=·"aide" | ||
| 492 | version·=·"*" | ||
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 498 | include·install_aide | 486 | include·install_aide |
| 499 | class·install_aide·{ | 487 | class·install_aide·{ |
| 500 | ··package·{·'aide': | 488 | ··package·{·'aide': |
| 501 | ····ensure·=>·'installed', | 489 | ····ensure·=>·'installed', |
| 502 | ··} | 490 | ··} |
| 503 | } | 491 | } |
| 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 497 | package·install·aide | ||
| 498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 503 | package·--add=aide | ||
| 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 505 | Run·the·following·command·to·generate·a·new·database: | 505 | Run·the·following·command·to·generate·a·new·database: |
| 506 | $·sudo·/usr/sbin/aide·--init | 506 | $·sudo·/usr/sbin/aide·--init |
| 507 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 507 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 508 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 508 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 509 | To·initiate·a·manual·check,·run·the·following·command: | 509 | To·initiate·a·manual·check,·run·the·following·command: |
| 510 | $·sudo·/usr/sbin/aide·--check | 510 | $·sudo·/usr/sbin/aide·--check |
| Offset 813, 39 lines modified | Offset 813, 14 lines modified | ||
| 813 | » echo·"to·see·what·package·to·(re)install"·>&2 | 813 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 814 | » false··#·end·with·an·error·code | 814 | » false··#·end·with·an·error·code |
| 815 | elif·test·"$rc"·!=·0;·then | 815 | elif·test·"$rc"·!=·0;·then |
| 816 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 816 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 817 | » false··#·end·with·an·error·code | 817 | » false··#·end·with·an·error·code |
| 818 | fi | 818 | fi |
| 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 820 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 821 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 822 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 823 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 824 | --- | ||
| 825 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 826 | kind:·MachineConfig | ||
| 827 | spec: | ||
| 828 | ··config: | ||
| 829 | ····ignition: | ||
| 830 | ······version:·3.1.0 | ||
| 831 | ····systemd: | ||
| 832 | ······units: | ||
| 833 | ········-·name:·configure-crypto-policy.service | ||
| 834 | ··········enabled:·true | ||
| 835 | ··········contents:·| | ||
| 836 | ············[Unit] | ||
| 837 | ············Before=kubelet.service | ||
| 838 | ············[Service] | ||
| 839 | ············Type=oneshot | ||
| 840 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 841 | ············RemainAfterExit=yes | ||
| 842 | ············[Install] | ||
| 843 | ············WantedBy=multi-user.target | ||
| 844 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 228646/234252 bytes (97.61%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038560:·206f·6620·3230·323 | 00038560:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | ||
| 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b730:·6469·6174·696f·6e20· | 0003b730:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b740:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b740:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b750:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b760:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b770:·643d·2269·646d·3732·3733·223e·3c74·6162··d="idm7273"><tab | |||
| 0003b780:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b790:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b7a0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b7b0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b7c0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b7d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b7e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b7f0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b800:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b810:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b820:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b830:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b840:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b850:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b860:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b870:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 0003b880:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 0003b890:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b8a0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b8b0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b8c0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b8d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b8e0:·3732·3734·2220·7461·6269·6e64·6578·3d22··7274"·tabindex=" | |||
| 0003b8f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b900:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b910:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b920:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b930:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b940:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b950:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b960:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b970:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b980:·7073·6522·2069·643d·2269·646d·3732·3734··pse"·id="idm7274 | |||
| 0003b990:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b9a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b9b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b9c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b9d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b9e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ba10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ba30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ba40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba80:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003ba90:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003baa0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003bab0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003bac0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003bad0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003bae0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003baf0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003bb00:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003bb10:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003bb20:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 0003bb30:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003bb40:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003bb50:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003bb60:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003bb70:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003bb80:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003bb90:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003bba0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bbb0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bbc0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bbd0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bbe0:·7267·6574·3d22·2369·646d·3732·3735·2220··rget="#idm7275"· | |||
| 0003bbf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bc00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bc10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bc20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bc30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bc40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bc50:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b | 0003b750:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b760:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b770:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b780:·2220·6964·3d22·6964·6d37·3237·3322·3e3c··"·id="idm7273">< | ||
| 0003b790:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b7a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b7b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b7c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b7d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b7e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bca0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bcb0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bcc0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bcd0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bce0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bcf0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bd00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bd10:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bd20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd30:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| Max diff block lines reached; 4044605/4076675 bytes (99.21%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:10 | 62 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 63 | ····*·cpe:/o:centos:centos:10 | 63 | ····*·cpe:/o:centos:centos:10 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 21 lines modified | Offset 122, 19 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package | 130 | [[packages]] |
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 165, 38 lines modified | Offset 163, 40 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 165 | ··-·low_complexity |
| 168 | ··-·low_disruption | 166 | ··-·low_disruption |
| 169 | ··-·medium_severity | 167 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | 175 | include·install_aide |
| 188 | class·install_aide·{ | 176 | class·install_aide·{ |
| 189 | ··package·{·'aide': | 177 | ··package·{·'aide': |
| 190 | ····ensure·=>·'installed', | 178 | ····ensure·=>·'installed', |
| 191 | ··} | 179 | ··} |
| 192 | } | 180 | } |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·install·aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 194 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 195 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 195 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 196 | Severity: ··medium | 196 | Severity: ··medium |
| 197 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 197 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 198 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 198 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 199 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 199 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1668, 14 lines modified | Offset 1668, 18 lines modified | ||
| 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1670 | ············_\x8i_\x8s_\x8m······1446 | 1670 | ············_\x8i_\x8s_\x8m······1446 |
| 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1676 | [customizations] | ||
| 1677 | fips·=·true | ||
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1676 | #·Remediation·is·applicable·only·in·certain·platforms | 1679 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1677 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1680 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1678 | var_system_crypto_policy='FIPS' | 1681 | var_system_crypto_policy='FIPS' |
| Offset 1798, 18 lines modified | Offset 1802, 14 lines modified | ||
| 1798 | ··-·NIST-800-53-SC-13 | 1802 | ··-·NIST-800-53-SC-13 |
| 1799 | ··-·enable_fips_mode | 1803 | ··-·enable_fips_mode |
| 1800 | ··-·high_severity | 1804 | ··-·high_severity |
| 1801 | ··-·medium_complexity | 1805 | ··-·medium_complexity |
| 1802 | ··-·medium_disruption | 1806 | ··-·medium_disruption |
| 1803 | ··-·reboot_required | 1807 | ··-·reboot_required |
| 1804 | ··-·restrict_strategy | 1808 | ··-·restrict_strategy |
| 1805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1806 | [customizations] | ||
| 1807 | fips·=·true | ||
| 1808 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1809 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1809 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1810 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1810 | fips-mode-setup·--enable | 1811 | fips-mode-setup·--enable |
| Max diff block lines reached; 464939/472139 bytes (98.48%) of diff not shown. | |||
| Offset 14416, 16 lines modified | Offset 14416, 16 lines modified | ||
| 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038560:·2028·6173·206f·6620·3230·323 | 00038560:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00038570:·323 | 00038570:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b730:·5265·6d65·6469·6174·696f·6e20· | 0003b730:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b740:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b740:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b750:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b760:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b770:·6522·2069·643d·2269·646d·3732·3733·223e··e"·id="idm7273"> | |||
| 0003b780:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b790:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b7a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b7b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b7c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b7d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b7e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b7f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b800:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b810:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b820:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b830:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b840:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b850:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b860:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b870:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b880:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b890:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b8a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b8b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b8c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b8d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b8e0:·2369·646d·3732·3734·2220·7461·6269·6e64··#idm7274"·tabind | |||
| 0003b8f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b900:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b910:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b920:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b930:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b940:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b950:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b960:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b970:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b980:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b990:·3732·3734·223e·3c74·6162·6c65·2063·6c61··7274"><table·cla | |||
| 0003b9a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b9b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b9c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b9d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b9e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b9f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba00:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ba10:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ba20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ba30:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ba40:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003ba50:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ba60:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ba70:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003ba80:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003ba90:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003baa0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003bab0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003bac0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003bad0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003bae0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003baf0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003bb00:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003bb10:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003bb20:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003bb30:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003bb40:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003bb50:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003bb60:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003bb70:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003bb80:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003bb90:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003bba0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bbb0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bbc0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bbd0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bbe0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003bbf0:·3735·2220·7461·6269·6e64·6578·3d22·3022··75"·tabindex="0" | |||
| 0003bc00:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bc10:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bc20:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bc30:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bc40:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bc50:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b | 0003b750:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003b760:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b770:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b780:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | ||
| 0003bca0:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003bcb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b | 0003b790:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | ||
| 0003b7a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b7b0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b7c0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b7d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b7e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b7f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b800:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b820:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| Max diff block lines reached; 3994934/4027142 bytes (99.20%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:10 | 62 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 63 | ····*·cpe:/o:centos:centos:10 | 63 | ····*·cpe:/o:centos:centos:10 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 21 lines modified | Offset 122, 19 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package | 130 | [[packages]] |
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 165, 38 lines modified | Offset 163, 40 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 165 | ··-·low_complexity |
| 168 | ··-·low_disruption | 166 | ··-·low_disruption |
| 169 | ··-·medium_severity | 167 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | 175 | include·install_aide |
| 188 | class·install_aide·{ | 176 | class·install_aide·{ |
| 189 | ··package·{·'aide': | 177 | ··package·{·'aide': |
| 190 | ····ensure·=>·'installed', | 178 | ····ensure·=>·'installed', |
| 191 | ··} | 179 | ··} |
| 192 | } | 180 | } |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·install·aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 194 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 195 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 195 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 196 | Severity: ··medium | 196 | Severity: ··medium |
| 197 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 197 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 198 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 198 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 199 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 199 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1668, 14 lines modified | Offset 1668, 18 lines modified | ||
| 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1670 | ············_\x8i_\x8s_\x8m······1446 | 1670 | ············_\x8i_\x8s_\x8m······1446 |
| 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1676 | [customizations] | ||
| 1677 | fips·=·true | ||
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1676 | #·Remediation·is·applicable·only·in·certain·platforms | 1679 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1677 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1680 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1678 | var_system_crypto_policy='FIPS' | 1681 | var_system_crypto_policy='FIPS' |
| Offset 1798, 18 lines modified | Offset 1802, 14 lines modified | ||
| 1798 | ··-·NIST-800-53-SC-13 | 1802 | ··-·NIST-800-53-SC-13 |
| 1799 | ··-·enable_fips_mode | 1803 | ··-·enable_fips_mode |
| 1800 | ··-·high_severity | 1804 | ··-·high_severity |
| 1801 | ··-·medium_complexity | 1805 | ··-·medium_complexity |
| 1802 | ··-·medium_disruption | 1806 | ··-·medium_disruption |
| 1803 | ··-·reboot_required | 1807 | ··-·reboot_required |
| 1804 | ··-·restrict_strategy | 1808 | ··-·restrict_strategy |
| 1805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1806 | [customizations] | ||
| 1807 | fips·=·true | ||
| 1808 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1809 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1809 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1810 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1810 | fips-mode-setup·--enable | 1811 | fips-mode-setup·--enable |
| Max diff block lines reached; 459247/466451 bytes (98.46%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038640:·6620·3230·323 | 00038640:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15182, 236 lines modified | Offset 15182, 236 lines modified | ||
| 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b540:·6564·6961·7469·6f6e·20 | 0003b540:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b550:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b560:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b570:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b580:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b590:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b5a0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b5b0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b5c0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b5d0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b5e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b5f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b600:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b610:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b620:·6172·6765·743d·2223·6964·6d38·3432·3922··arget="#idm8429" | |||
| 0003b630:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b640:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b650:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b660:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b670:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b680:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b690:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b | 0003b6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b6d0:·6964·3d22·6964·6d38·3432·3922·3e3c·7461··id="idm8429"><ta | ||
| 0003b | 0003b6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b710:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b720:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b730:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b5f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b600:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b610:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b620:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b630:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b740:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b750:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b760:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b770:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b780:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b790:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b7a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b7b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003b7c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b680:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003b | 0003b7d0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b7e0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b7f0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b800:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003b810:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003b820:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003b830:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003b840:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003b850:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003b860:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003b870:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003b880:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003b890:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b8a0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b8b0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b8c0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b8d0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b | 0003b8e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003b8f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003b900:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b6d | 0003b910:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b | 0003b920:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b | 0003b930:·2223·6964·6d38·3433·3022·2074·6162·696e··"#idm8430"·tabin | ||
| 0003b | 0003b940:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b | 0003b950:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b | 0003b960:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b73 | 0003b970:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b | 0003b980:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b750:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b760:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b770:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b780:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b790:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b7a0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b7b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b7c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b7d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b7e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003b990:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b9a0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b9b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b9c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b9d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9e0:·2269·646d·3834·3330·223e·3c74·6162·6c65··"idm8430"><table | |||
| 0003b9f0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ba00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ba10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ba20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba50:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ba60:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b | 0003ba70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b810:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003ba80:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003ba90:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003baa0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| Max diff block lines reached; 2754524/2786870 bytes (98.84%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 21 lines modified | Offset 119, 19 lines modified | ||
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package | 127 | [[packages]] |
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 135 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 163, 38 lines modified | Offset 161, 40 lines modified | ||
| 163 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 164 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 165 | ··-·low_complexity | 163 | ··-·low_complexity |
| 166 | ··-·low_disruption | 164 | ··-·low_disruption |
| 167 | ··-·medium_severity | 165 | ··-·medium_severity |
| 168 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | 173 | include·install_aide |
| 186 | class·install_aide·{ | 174 | class·install_aide·{ |
| 187 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 188 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 189 | ··} | 177 | ··} |
| 190 | } | 178 | } |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 328, 50 lines modified | Offset 328, 50 lines modified | ||
| 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 329 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 329 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 330 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 330 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 331 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 331 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 332 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 332 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 333 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 333 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 334 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 334 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 336 | [[customizations.filesystem]] | ||
| 337 | mountpoint·=·"/home" | ||
| 338 | size·=·1073741824 | ||
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 336 | logvol·/home·1024 | 340 | logvol·/home·1024 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 342 | part·/home | 346 | part·/home |
| 343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 344 | [[customizations.filesystem]] | ||
| 345 | mountpoint·=·"/home" | ||
| 346 | size·=·1073741824 | ||
| 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 348 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 348 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 349 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 349 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 350 | Severity: ··unknown | 350 | Severity: ··unknown |
| 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv | 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 352 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 352 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| Max diff block lines reached; 222839/229676 bytes (97.02%) of diff not shown. | |||
| Offset 14429, 15 lines modified | Offset 14429, 15 lines modified | ||
| 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038630:·6620·3230·323 | 00038630:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15187, 236 lines modified | Offset 15187, 236 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20· | 0003b590:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b5a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b5b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b5a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b5b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b5c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5d0:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b5e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b5f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b600:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b610:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b620:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b630:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b640:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b650:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b660:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b670:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b680:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b690:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b6a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b6c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b6d0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b6e0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b6f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b700:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b710:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b720:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b730:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b740:·2369·646d·3834·3239·2220·7461·6269·6e64··#idm8429"·tabind | |||
| 0003b750:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b760:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b770:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b780:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b790:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b7a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b7b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b7c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b7d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b7e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b7f0:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 0003b800:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b810:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b820:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b830:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b840:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b850:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b860:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b870:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b880:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b890:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b8a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b8b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b8c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b8d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b5f0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | ||
| 0003b600:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b610:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b620:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b8f0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b900:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b910:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b920:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b930:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b940:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b950:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b960:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b970:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b980:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b990:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b9a0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b9b0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b9c0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b9d0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b9e0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b9f0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b | 0003b630:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b640:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b650:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b660:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b670:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b | 0003b680:·3239·2220·7461·6269·6e64·6578·3d22·3022··29"·tabindex="0" | ||
| 0003b | 0003b690:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003b6a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b | 0003b6b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003b6c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003b6d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6e0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b6f0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b700:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b710:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b720:·6522·2069·643d·2269·646d·3834·3239·223e··e"·id="idm8429"> | |||
| 0003b730:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b740:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bab0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bac0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bad0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bae0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003baf0:·6170·7365·2220·6964·3d22·6964·6d38·3433··apse"·id="idm843 | |||
| 0003bb00:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003bb10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| Max diff block lines reached; 2848200/2880546 bytes (98.88%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 21 lines modified | Offset 120, 19 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8c_\x8i_\x8s············6.1.1 | 124 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package | 128 | [[packages]] |
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 38 lines modified | Offset 162, 40 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 164 | ··-·low_complexity |
| 167 | ··-·low_disruption | 165 | ··-·low_disruption |
| 168 | ··-·medium_severity | 166 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | 174 | include·install_aide |
| 187 | class·install_aide·{ | 175 | class·install_aide·{ |
| 188 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 189 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 190 | ··} | 178 | ··} |
| 191 | } | 179 | } |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | package·install·aide | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 812, 50 lines modified | Offset 812, 50 lines modified | ||
| 812 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 812 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 813 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 813 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 814 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 814 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 815 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 815 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 816 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 816 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 817 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 817 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 818 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 818 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 820 | [[customizations.filesystem]] | ||
| 821 | mountpoint·=·"/home" | ||
| 822 | size·=·1073741824 | ||
| 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 820 | logvol·/home·1024 | 824 | logvol·/home·1024 |
| 821 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 822 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 826 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 823 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 827 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 824 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 828 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 825 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 829 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 826 | part·/home | 830 | part·/home |
| 827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 828 | [[customizations.filesystem]] | ||
| 829 | mountpoint·=·"/home" | ||
| 830 | size·=·1073741824 | ||
| 831 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 831 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 832 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 832 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 833 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 833 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 834 | Severity: ··unknown | 834 | Severity: ··unknown |
| 835 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv | 835 | Rule·ID:····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 836 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 836 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| Max diff block lines reached; 231304/238088 bytes (97.15%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038650:·6620·3230·323 | 00038650:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15178, 235 lines modified | Offset 15178, 235 lines modified | ||
| 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | ||
| 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b500:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b510:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b500:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b510:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b520:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b530:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b540:·2269·646d·3834·3238·223e·3c74·6162·6c65··"idm8428"><table | |||
| 0003b550:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b560:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b570:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b580:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b590:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b5a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b5b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b5c0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b5d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b5f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b600:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b610:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b620:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b630:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b640:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003b650:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003b660:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b670:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b680:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b690:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b6a0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b6b0:·3239·2220·7461·6269·6e64·6578·3d22·3022··29"·tabindex="0" | |||
| 0003b6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b710:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b720:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b730:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b740:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b750:·6522·2069·643d·2269·646d·3834·3239·223e··e"·id="idm8429"> | |||
| 0003b760:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b770:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b780:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b790:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b7a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b7b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b7c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b7d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b7e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b7f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b800:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b810:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b820:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b830:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b840:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b850:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b860:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b870:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b880:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b890:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b8a0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b8b0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b8c0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b8d0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b8e0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b8f0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003b900:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b910:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b920:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b930:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b940:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b950:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b960:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b970:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b980:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b990:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b9a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b9b0:·6574·3d22·2369·646d·3834·3330·2220·7461··et="#idm8430"·ta | |||
| 0003b9c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b9d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b9e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b9f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003ba00:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003ba10:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003ba20:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b | 0003b520:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b530:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b540:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b550:·6964·3d22·6964·6d38·3432·3822·3e3c·7072··id="idm8428"><pr | ||
| 0003b560:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b570:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b580:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b590:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b5a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b5b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b5c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b5d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b5e0:·6574·3d22·2369·646d·3834·3239·2220·7461··et="#idm8429"·ta | |||
| 0003b5f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b600:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b610:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b620:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b630:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b640:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| Max diff block lines reached; 1594544/1626752 bytes (98.02%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 21 lines modified | Offset 135, 19 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package | 143 | [[packages]] |
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 151 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 38 lines modified | Offset 177, 40 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 177 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 178 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 179 | ··-·low_complexity |
| 182 | ··-·low_disruption | 180 | ··-·low_disruption |
| 183 | ··-·medium_severity | 181 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 182 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 183 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | [[packages]] | ||
| 194 | name·=·"aide" | ||
| 195 | version·=·"*" | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | include·install_aide | 189 | include·install_aide |
| 202 | class·install_aide·{ | 190 | class·install_aide·{ |
| 203 | ··package·{·'aide': | 191 | ··package·{·'aide': |
| 204 | ····ensure·=>·'installed', | 192 | ····ensure·=>·'installed', |
| 205 | ··} | 193 | ··} |
| 206 | } | 194 | } |
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | package·install·aide | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 367, 56 lines modified | Offset 367, 56 lines modified | ||
| 367 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 367 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 368 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 368 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 369 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 369 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 370 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 370 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 371 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 371 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 372 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 372 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 375 | [[customizations.filesystem]] | ||
| 376 | mountpoint·=·"/home" | ||
| 377 | size·=·1073741824 | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 375 | logvol·/home·1024 | 379 | logvol·/home·1024 |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 381 | part·/home | 385 | part·/home |
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 383 | [[customizations.filesystem]] | ||
| 384 | mountpoint·=·"/home" | ||
| 385 | size·=·1073741824 | ||
| 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 387 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 387 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 388 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 388 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| 389 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the | 389 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the |
| 390 | mountpoint·can·instead·be·configured·later. | 390 | mountpoint·can·instead·be·configured·later. |
| 391 | ············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is | 391 | ············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is |
| Max diff block lines reached; 147272/153543 bytes (95.92%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038640:·323 | 00038640:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14849, 217 lines modified | Offset 14849, 217 lines modified | ||
| 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | ||
| 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a070:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003a080:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003a070:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003a080:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a090:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003a0a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003a0b0:·6964·3d22·6964·6d31·3235·3839·223e·3c74··id="idm12589"><t | |||
| 0003a0c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003a0d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003a0e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003a0f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003a100:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003a110:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003a120:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a130:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003a140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a150:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003a160:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003a170:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a180:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003a190:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003a1a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003a1b0:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 0003a1c0:·6e73·7461·6c6c·2064·6e66·2d61·7574·6f6d··nstall·dnf-autom | |||
| 0003a1d0:·6174·6963·0a3c·2f63·6f64·653e·3c2f·7072··atic.</code></pr | |||
| 0003a1e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003a1f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003a200:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003a210:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003a220:·6172·6765·743d·2223·6964·6d31·3235·3930··arget="#idm12590 | |||
| 0003a230:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003a240:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003a250:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003a260:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003a270:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003a280:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003a290:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003a2a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a2b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a2c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a2d0:·2069·643d·2269·646d·3132·3539·3022·3e3c···id="idm12590">< | |||
| 0003a2e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a2f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a300:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a310:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a320:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a330:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a340:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a350:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a360:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a370:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a380:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a390:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a3a0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a3b0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003a3c0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a3d0:·3e3c·636f·6465·3e0a·6966·2021·2072·706d··><code>.if·!·rpm | |||
| 0003a3e0:·202d·7120·2d2d·7175·6965·7420·2264·6e66···-q·--quiet·"dnf | |||
| 0003a3f0:·2d61·7574·6f6d·6174·6963·2220·3b20·7468··-automatic"·;·th | |||
| 0003a400:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003a410:·6c6c·202d·7920·2264·6e66·2d61·7574·6f6d··ll·-y·"dnf-autom | |||
| 0003a420:·6174·6963·220a·6669·0a3c·2f63·6f64·653e··atic".fi.</code> | |||
| 0003a430:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a440:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a450:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a460:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a470:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a480:·3235·3931·2220·7461·6269·6e64·6578·3d22··2591"·tabindex=" | |||
| 0003a490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a4a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a4b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a4c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a4d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a4e0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003a4f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a500:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a510:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a520:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a530:·3235·3931·223e·3c74·6162·6c65·2063·6c61··2591"><table·cla | |||
| 0003a540:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a550:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a560:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a570:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a580:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a590:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a5a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a5b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a5c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a5d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a5e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a5f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a600:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003a610:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003a620:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003a630:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 0003a640:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 0003a650:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003a660:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 0003a670:·2d61·7574·6f6d·6174·6963·0a20·2020·2073··-automatic.····s | |||
| 0003a680:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003a690:·7461·6773·3a0a·2020·2d20·656e·6162·6c65··tags:.··-·enable | |||
| 0003a6a0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003a6b0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003a6c0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| Max diff block lines reached; 370066/399790 bytes (92.57%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 100, 21 lines modified | Offset 100, 19 lines modified | ||
| 100 | $·sudo·dnf·install·dnf-automatic | 100 | $·sudo·dnf·install·dnf-automatic |
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | package | 108 | [[packages]] |
| 109 | name·=·"dnf-automatic" | ||
| 110 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 116 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 132, 38 lines modified | Offset 130, 40 lines modified | ||
| 132 | ··tags: | 130 | ··tags: |
| 133 | ··-·enable_strategy | 131 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 132 | ··-·low_complexity |
| 135 | ··-·low_disruption | 133 | ··-·low_disruption |
| 136 | ··-·medium_severity | 134 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 135 | ··-·no_reboot_needed |
| 138 | ··-·package_dnf-automatic_installed | 136 | ··-·package_dnf-automatic_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·--add=dnf-automatic | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"dnf-automatic" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | include·install_dnf-automatic | 142 | include·install_dnf-automatic |
| 155 | class·install_dnf-automatic·{ | 143 | class·install_dnf-automatic·{ |
| 156 | ··package·{·'dnf-automatic': | 144 | ··package·{·'dnf-automatic': |
| 157 | ····ensure·=>·'installed', | 145 | ····ensure·=>·'installed', |
| 158 | ··} | 146 | ··} |
| 159 | } | 147 | } |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·dnf-automatic | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=dnf-automatic | ||
| 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 162 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 162 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 163 | automatic.conf. | 163 | automatic.conf. |
| 164 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 164 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 165 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 165 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 166 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 166 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9474, 21 lines modified | Offset 9474, 14 lines modified | ||
| 9474 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9474 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9475 | ···························A.9.1.2 | 9475 | ···························A.9.1.2 |
| 9476 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9476 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9477 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9477 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9478 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9478 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9479 | ············_\x8c_\x8i_\x8s············2.1.3 | 9479 | ············_\x8c_\x8i_\x8s············2.1.3 |
| 9480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9486 | package·remove·dhcp-server | ||
| 9487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9492 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server | 9486 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server |
| Offset 9518, 33 lines modified | Offset 9511, 40 lines modified | ||
| 9518 | ··-·PCI-DSSv4-2.2.4 | 9511 | ··-·PCI-DSSv4-2.2.4 |
| 9519 | ··-·disable_strategy | 9512 | ··-·disable_strategy |
| 9520 | ··-·low_complexity | 9513 | ··-·low_complexity |
| 9521 | ··-·low_disruption | 9514 | ··-·low_disruption |
| 9522 | ··-·medium_severity | 9515 | ··-·medium_severity |
| 9523 | ··-·no_reboot_needed | 9516 | ··-·no_reboot_needed |
| 9524 | ··-·package_dhcp_removed | 9517 | ··-·package_dhcp_removed |
| 9525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 34879/40682 bytes (85.74%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038560:·7320·6f66·2032·3032·3 | 00038560:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15288, 187 lines modified | Offset 15288, 187 lines modified | ||
| 0003bb70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bb70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bb80:·6d39·3138·3922·2074·6162·696e·6465·783d··m9189"·tabindex= | 0003bb80:·6d39·3138·3922·2074·6162·696e·6465·783d··m9189"·tabindex= | ||
| 0003bb90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bb90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bba0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bba0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bbb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bbb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bbc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bbc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bbd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bbd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bbe0:·6564·6961·7469·6f6e·204 | 0003bbe0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003bbf0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bc00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bc10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bc20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bc30:·3931·3839·223e·3c74·6162·6c65·2063·6c61··9189"><table·cla | |||
| 0003bc40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bc50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bc60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bc70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bc80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bbf0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0003bc00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bc10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bc20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bc30:·6964·6d39·3138·3922·3e3c·7461·626c·6520··idm9189"><table· | |||
| 0003bc40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bc50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bc60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bc70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bc80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bc90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bca0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bcb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bc | 0003bc90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003bcd0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bc | 0003bca0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003bcb0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bcc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bcd0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bce0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bcf0:· | 0003bcf0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bd00:· | 0003bd00:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bd10:· | 0003bd10:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bd20:· | 0003bd20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bd30:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 0003bd40:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 0003bd50:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 0003bd60:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 0003bd70:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 0003bd80:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 0003bd90:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 0003bda0:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 0003bdb0:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 0003bdc0:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 0003bdd0:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 0003bde0:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 0003bdf0:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 0003be00:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 0003be10:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 0003be20:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 0003be30:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 0003be40:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 0003be50:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 0003be60:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 0003be70:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 0003be80:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 0003be90:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 0003bea0:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 0003beb0:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 0003bec0:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bed0:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 0003bee0:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 0003bef0:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 0003bf00:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 0003bf10:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 0003bf20:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 0003bf30:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 0003bf40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bf50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bf60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bf70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bf80:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 0003bf90:·3139·3022·2074·6162·696e·6465·783d·2230··190"·tabindex="0 | |||
| 0003bfa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bfb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bfc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bfd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bfe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bff0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003c000:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c010:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c020:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c030:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003c040:·3930·223e·3c74·6162·6c65·2063·6c61·7373··90"><table·class | |||
| 0003c050:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c060:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c070:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c080:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c090:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c0a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c0b0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c0c0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c0d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c0e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c0f0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c100:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c110:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003c120:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003c130:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003 | 0003bd30:·2d20·6e61·6d65·3a20·5843·4344·4620·5661··-·name:·XCCDF·Va | ||
| 0003 | 0003bd40:·6c75·6520·7661·725f·7379·7374·656d·5f63··lue·var_system_c | ||
| 0003 | 0003bd50:·7279·7074·6f5f·706f·6c69·6379·2023·2070··rypto_policy·#·p | ||
| 0003 | 0003bd60:·726f·6d6f·7465·2074·6f20·7661·7269·6162··romote·to·variab | ||
| Max diff block lines reached; 1528486/1554070 bytes (98.35%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Advanced | 60 | ··············Linux·9·-·Advanced |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 138, 39 lines modified | Offset 138, 14 lines modified | ||
| 138 | » echo·"to·see·what·package·to·(re)install"·>&2 | 138 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 139 | » false··#·end·with·an·error·code | 139 | » false··#·end·with·an·error·code |
| 140 | elif·test·"$rc"·!=·0;·then | 140 | elif·test·"$rc"·!=·0;·then |
| 141 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 141 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 142 | » false··#·end·with·an·error·code | 142 | » false··#·end·with·an·error·code |
| 143 | fi | 143 | fi |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 149 | --- | ||
| 150 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 151 | kind:·MachineConfig | ||
| 152 | spec: | ||
| 153 | ··config: | ||
| 154 | ····ignition: | ||
| 155 | ······version:·3.1.0 | ||
| 156 | ····systemd: | ||
| 157 | ······units: | ||
| 158 | ········-·name:·configure-crypto-policy.service | ||
| 159 | ··········enabled:·true | ||
| 160 | ··········contents:·| | ||
| 161 | ············[Unit] | ||
| 162 | ············Before=kubelet.service | ||
| 163 | ············[Service] | ||
| 164 | ············Type=oneshot | ||
| 165 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 166 | ············RemainAfterExit=yes | ||
| 167 | ············[Install] | ||
| 168 | ············WantedBy=multi-user.target | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 174 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 149 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 175 | ··set_fact: | 150 | ··set_fact: |
| Offset 219, 14 lines modified | Offset 194, 39 lines modified | ||
| 219 | ··-·PCI-DSSv4-2.2.7 | 194 | ··-·PCI-DSSv4-2.2.7 |
| 220 | ··-·configure_crypto_policy | 195 | ··-·configure_crypto_policy |
| 221 | ··-·high_severity | 196 | ··-·high_severity |
| 222 | ··-·low_complexity | 197 | ··-·low_complexity |
| 223 | ··-·low_disruption | 198 | ··-·low_disruption |
| 224 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 225 | ··-·restrict_strategy | 200 | ··-·restrict_strategy |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 206 | --- | ||
| 207 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 208 | kind:·MachineConfig | ||
| 209 | spec: | ||
| 210 | ··config: | ||
| 211 | ····ignition: | ||
| 212 | ······version:·3.1.0 | ||
| 213 | ····systemd: | ||
| 214 | ······units: | ||
| 215 | ········-·name:·configure-crypto-policy.service | ||
| 216 | ··········enabled:·true | ||
| 217 | ··········contents:·| | ||
| 218 | ············[Unit] | ||
| 219 | ············Before=kubelet.service | ||
| 220 | ············[Service] | ||
| 221 | ············Type=oneshot | ||
| 222 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 223 | ············RemainAfterExit=yes | ||
| 224 | ············[Install] | ||
| 225 | ············WantedBy=multi-user.target | ||
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 229 | Severity: ··medium | 229 | Severity: ··medium |
| 230 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 230 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 231 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 231 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 232 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 232 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1718, 21 lines modified | Offset 1718, 19 lines modified | ||
| 1718 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·c\x8cr\x8ry\x8yp\x8pt\x8ts\x8se\x8et\x8tu\x8up\x8p·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1718 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·c\x8cr\x8ry\x8yp\x8pt\x8ts\x8se\x8et\x8tu\x8up\x8p·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1719 | The·cryptsetup·package·can·be·installed·with·the·following·command: | 1719 | The·cryptsetup·package·can·be·installed·with·the·following·command: |
| 1720 | $·sudo·dnf·install·cryptsetup | 1720 | $·sudo·dnf·install·cryptsetup |
| 1721 | Rationale:··LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. | 1721 | Rationale:··LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. |
| 1722 | Severity: ··medium | 1722 | Severity: ··medium |
| 1723 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed | 1723 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed |
| 1724 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 | 1724 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 |
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1726 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1727 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1728 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1729 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1730 | package | 1726 | [[packages]] |
| 1727 | name·=·"cryptsetup" | ||
| 1728 | version·=·"*" | ||
| 1731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1731 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1732 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1733 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1736 | if·!·rpm·-q·--quiet·"cryptsetup"·;·then | 1734 | if·!·rpm·-q·--quiet·"cryptsetup"·;·then |
| Offset 1751, 38 lines modified | Offset 1749, 40 lines modified | ||
| 1751 | ··-·PCI-DSSv4-3.5.1.2 | 1749 | ··-·PCI-DSSv4-3.5.1.2 |
| 1752 | ··-·enable_strategy | 1750 | ··-·enable_strategy |
| 1753 | ··-·low_complexity | 1751 | ··-·low_complexity |
| 1754 | ··-·low_disruption | 1752 | ··-·low_disruption |
| 1755 | ··-·medium_severity | 1753 | ··-·medium_severity |
| 1756 | ··-·no_reboot_needed | 1754 | ··-·no_reboot_needed |
| Max diff block lines reached; 137003/143139 bytes (95.71%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038550:·2020·2861·7320·6f66·2032·3032·3 | 00038550:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00038560:·2d32·3 | 00038560:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15248, 187 lines modified | Offset 15248, 187 lines modified | ||
| 0003b8f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b8f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b900:·646d·3931·3839·2220·7461·6269·6e64·6578··dm9189"·tabindex | 0003b900:·646d·3931·3839·2220·7461·6269·6e64·6578··dm9189"·tabindex | ||
| 0003b910:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b910:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b920:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b920:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b930:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b930:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b940:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b940:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b950:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b950:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b960:·6d65·6469·6174·696f·6e20·4 | 0003b960:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b970:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b980:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b990:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b9b0:·6d39·3138·3922·3e3c·7461·626c·6520·636c··m9189"><table·cl | |||
| 0003b9c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b9d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b9e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b9f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba00:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b970:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0003b980:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b990:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b9a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9b0:·2269·646d·3931·3839·223e·3c74·6162·6c65··"idm9189"><table | |||
| 0003b9c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b9d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b9e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b9f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba00:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba20:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ba30:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ba | 0003ba10:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003ba50:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba | 0003ba20:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003ba30:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ba40:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba50:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ba60:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ba70:· | 0003ba70:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003ba80:· | 0003ba80:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003ba90:·7 | 0003ba90:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003baa0:· | 0003baa0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003bab0:·6465·3e2d·2d2d·0a61·7069·5665·7273·696f··de>---.apiVersio | |||
| 0003bac0:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 0003bad0:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| 0003bae0:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | |||
| 0003baf0:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | |||
| 0003bb00:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | |||
| 0003bb10:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | |||
| 0003bb20:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | |||
| 0003bb30:·2020·2073·7973·7465·6d64·3a0a·2020·2020·····systemd:.···· | |||
| 0003bb40:·2020·756e·6974·733a·0a20·2020·2020·2020····units:.······· | |||
| 0003bb50:·202d·206e·616d·653a·2063·6f6e·6669·6775···-·name:·configu | |||
| 0003bb60:·7265·2d63·7279·7074·6f2d·706f·6c69·6379··re-crypto-policy | |||
| 0003bb70:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 0003bb80:·2020·2065·6e61·626c·6564·3a20·7472·7565·····enabled:·true | |||
| 0003bb90:·0a20·2020·2020·2020·2020·2063·6f6e·7465··.··········conte | |||
| 0003bba0:·6e74·733a·207c·0a20·2020·2020·2020·2020··nts:·|.········· | |||
| 0003bbb0:·2020·205b·556e·6974·5d0a·2020·2020·2020·····[Unit].······ | |||
| 0003bbc0:·2020·2020·2020·4265·666f·7265·3d6b·7562········Before=kub | |||
| 0003bbd0:·656c·6574·2e73·6572·7669·6365·0a20·2020··elet.service.··· | |||
| 0003bbe0:·2020·2020·2020·2020·205b·5365·7276·6963···········[Servic | |||
| 0003bbf0:·655d·0a20·2020·2020·2020·2020·2020·2054··e].············T | |||
| 0003bc00:·7970·653d·6f6e·6573·686f·740a·2020·2020··ype=oneshot.···· | |||
| 0003bc10:·2020·2020·2020·2020·4578·6563·5374·6172··········ExecStar | |||
| 0003bc20:·743d·7570·6461·7465·2d63·7279·7074·6f2d··t=update-crypto- | |||
| 0003bc30:·706f·6c69·6369·6573·202d·2d73·6574·207b··policies·--set·{ | |||
| 0003bc40:·7b2e·7661·725f·7379·7374·656d·5f63·7279··{.var_system_cry | |||
| 0003bc50:·7074·6f5f·706f·6c69·6379·7d7d·0a20·2020··pto_policy}}.··· | |||
| 0003bc60:·2020·2020·2020·2020·2052·656d·6169·6e41···········RemainA | |||
| 0003bc70:·6674·6572·4578·6974·3d79·6573·0a20·2020··fterExit=yes.··· | |||
| 0003bc80:·2020·2020·2020·2020·205b·496e·7374·616c···········[Instal | |||
| 0003bc90:·6c5d·0a20·2020·2020·2020·2020·2020·2057··l].············W | |||
| 0003bca0:·616e·7465·6442·793d·6d75·6c74·692d·7573··antedBy=multi-us | |||
| 0003bcb0:·6572·2e74·6172·6765·740a·3c2f·636f·6465··er.target.</code | |||
| 0003bcc0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bcd0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bce0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bcf0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bd00:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bd10:·3931·3930·2220·7461·6269·6e64·6578·3d22··9190"·tabindex=" | |||
| 0003bd20:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bd30:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bd40:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bd50:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bd60:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bd70:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003bd80:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bd90:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bda0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bdb0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003bdc0:·3139·3022·3e3c·7461·626c·6520·636c·6173··190"><table·clas | |||
| 0003bdd0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bde0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bdf0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003be00:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003be10:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003be20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003be30:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003be40:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003be50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003be60:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003be70:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003be80:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003be90:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003bea0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003beb0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b | 0003bab0:·3e2d·206e·616d·653a·2058·4343·4446·2056··>-·name:·XCCDF·V | ||
| 0003b | 0003bac0:·616c·7565·2076·6172·5f73·7973·7465·6d5f··alue·var_system_ | ||
| 0003b | 0003bad0:·6372·7970·746f·5f70·6f6c·6963·7920·2320··crypto_policy·#· | ||
| Max diff block lines reached; 1150110/1175832 bytes (97.81%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Basic | 60 | ··············Linux·9·-·Basic |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 130, 39 lines modified | Offset 130, 14 lines modified | ||
| 130 | » echo·"to·see·what·package·to·(re)install"·>&2 | 130 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 131 | » false··#·end·with·an·error·code | 131 | » false··#·end·with·an·error·code |
| 132 | elif·test·"$rc"·!=·0;·then | 132 | elif·test·"$rc"·!=·0;·then |
| 133 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 133 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 134 | » false··#·end·with·an·error·code | 134 | » false··#·end·with·an·error·code |
| 135 | fi | 135 | fi |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | --- | ||
| 142 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 143 | kind:·MachineConfig | ||
| 144 | spec: | ||
| 145 | ··config: | ||
| 146 | ····ignition: | ||
| 147 | ······version:·3.1.0 | ||
| 148 | ····systemd: | ||
| 149 | ······units: | ||
| 150 | ········-·name:·configure-crypto-policy.service | ||
| 151 | ··········enabled:·true | ||
| 152 | ··········contents:·| | ||
| 153 | ············[Unit] | ||
| 154 | ············Before=kubelet.service | ||
| 155 | ············[Service] | ||
| 156 | ············Type=oneshot | ||
| 157 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 158 | ············RemainAfterExit=yes | ||
| 159 | ············[Install] | ||
| 160 | ············WantedBy=multi-user.target | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 166 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 141 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 167 | ··set_fact: | 142 | ··set_fact: |
| Offset 211, 14 lines modified | Offset 186, 39 lines modified | ||
| 211 | ··-·PCI-DSSv4-2.2.7 | 186 | ··-·PCI-DSSv4-2.2.7 |
| 212 | ··-·configure_crypto_policy | 187 | ··-·configure_crypto_policy |
| 213 | ··-·high_severity | 188 | ··-·high_severity |
| 214 | ··-·low_complexity | 189 | ··-·low_complexity |
| 215 | ··-·low_disruption | 190 | ··-·low_disruption |
| 216 | ··-·no_reboot_needed | 191 | ··-·no_reboot_needed |
| 217 | ··-·restrict_strategy | 192 | ··-·restrict_strategy |
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 198 | --- | ||
| 199 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 200 | kind:·MachineConfig | ||
| 201 | spec: | ||
| 202 | ··config: | ||
| 203 | ····ignition: | ||
| 204 | ······version:·3.1.0 | ||
| 205 | ····systemd: | ||
| 206 | ······units: | ||
| 207 | ········-·name:·configure-crypto-policy.service | ||
| 208 | ··········enabled:·true | ||
| 209 | ··········contents:·| | ||
| 210 | ············[Unit] | ||
| 211 | ············Before=kubelet.service | ||
| 212 | ············[Service] | ||
| 213 | ············Type=oneshot | ||
| 214 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 215 | ············RemainAfterExit=yes | ||
| 216 | ············[Install] | ||
| 217 | ············WantedBy=multi-user.target | ||
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 219 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 220 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 220 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 221 | Severity: ··medium | 221 | Severity: ··medium |
| 222 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 222 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 223 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 223 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 224 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 224 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1096, 36 lines modified | Offset 1096, 14 lines modified | ||
| 1096 | cat·<<EOF·>/etc/issue | 1096 | cat·<<EOF·>/etc/issue |
| 1097 | $formatted | 1097 | $formatted |
| 1098 | EOF | 1098 | EOF |
| 1099 | else | 1099 | else |
| 1100 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1100 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1101 | fi | 1101 | fi |
| 1102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1103 | --- | ||
| 1104 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1105 | kind:·MachineConfig | ||
| 1106 | metadata: | ||
| 1107 | ··labels: | ||
| 1108 | ····machineconfiguration.openshift.io/role:·master | ||
| 1109 | ····machineconfiguration.openshift.io/role:·worker | ||
| 1110 | ··name:·75-banner-etc-issue | ||
| 1111 | spec: | ||
| 1112 | ··config: | ||
| 1113 | ····ignition: | ||
| 1114 | ······version:·3.1.0 | ||
| 1115 | ····storage: | ||
| 1116 | ······files: | ||
| 1117 | ······-·contents: | ||
| 1118 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 1119 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 1120 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 1121 | ········mode:·0644 | ||
| 1122 | ········path:·/etc/issue.d/legal-notice | ||
| 1123 | ········overwrite:·true | ||
| 1124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 89556/96603 bytes (92.71%) of diff not shown. | |||
| Offset 14417, 15 lines modified | Offset 14417, 15 lines modified | ||
| 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038570:·7320·6f66·2032·3032·3 | 00038570:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15289, 187 lines modified | Offset 15289, 187 lines modified | ||
| 0003bb80:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bb80:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bb90:·6d39·3138·3922·2074·6162·696e·6465·783d··m9189"·tabindex= | 0003bb90:·6d39·3138·3922·2074·6162·696e·6465·783d··m9189"·tabindex= | ||
| 0003bba0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bba0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bbb0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bbb0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bbc0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bbc0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bbd0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bbd0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bbe0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bbe0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bbf0:·6564·6961·7469·6f6e·204b·7562·6572·6e65··ediation·Kuberne | |||
| 0003bc00:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0003bc10:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bc20:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bc30:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bc40:·6964·6d39·3138·3922·3e3c·7461·626c·6520··idm9189"><table· | |||
| 0003bc50:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bc60:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bc70:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bc80:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bc90:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bca0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bcb0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bcc0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bcd0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bce0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bcf0:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | |||
| 0003bd00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bd10:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003bd20:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003bd30:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bd40:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 0003bd50:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 0003bd60:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 0003bd70:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 0003bd80:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 0003bd90:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 0003bda0:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 0003bdb0:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 0003bdc0:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 0003bdd0:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 0003bde0:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 0003bdf0:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 0003be00:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 0003be10:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 0003be20:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 0003be30:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 0003be40:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 0003be50:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 0003be60:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 0003be70:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 0003be80:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 0003be90:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 0003bea0:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 0003beb0:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 0003bec0:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 0003bed0:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bee0:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 0003bef0:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 0003bf00:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 0003bf10:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 0003bf20:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 0003bf30:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 0003bf40:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 0003bf50:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bf60:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bf70:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bf80:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bf90:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 0003bfa0:·3139·3022·2074·6162·696e·6465·783d·2230··190"·tabindex="0 | |||
| 0003bfb0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bfc0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bfd0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bfe0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bff0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003 | 0003bbf0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003c0 | 0003bc00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003c0 | 0003bc10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003c0 | 0003bc20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003c0 | 0003bc30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003 | 0003bc40:·3931·3839·223e·3c74·6162·6c65·2063·6c61··9189"><table·cla | ||
| 0003c0 | 0003bc50:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003c07 | 0003bc60:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003c0 | 0003bc70:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003c0 | 0003bc80:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003c0 | 0003bc90:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003c0 | 0003bca0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003c0 | 0003bcb0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003bcc0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bcd0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bce0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bcf0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bd00:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bd10:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003bd20:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003bd30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bd40:·2d20·6e61·6d65·3a20·5843·4344·4620·5661··-·name:·XCCDF·Va | |||
| 0003bd50:·6c75·6520·7661·725f·7379·7374·656d·5f63··lue·var_system_c | |||
| 0003bd60:·7279·7074·6f5f·706f·6c69·6379·2023·2070··rypto_policy·#·p | |||
| 0003bd70:·726f·6d6f·7465·2074·6f20·7661·7269·6162··romote·to·variab | |||
| 0003bd80:·6c65·0a20·2073·6574·5f66·6163·743a·0a20··le.··set_fact:.· | |||
| 0003bd90:·2020·2076·6172·5f73·7973·7465·6d5f·6372·····var_system_cr | |||
| 0003bda0:·7970·746f·5f70·6f6c·6963·793a·2021·2173··ypto_policy:·!!s | |||
| 0003bdb0:·7472·203c·6162·6272·2074·6974·6c65·3d22··tr·<abbr·title=" | |||
| 0003bdc0:·6672·6f6d·2050·726f·6669·6c65·2f72·6566··from·Profile/ref | |||
| 0003bdd0:·696e·652d·7661·6c75·653a·2078·6363·6466··ine-value:·xccdf | |||
| 0003bde0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | |||
| 0003bdf0:·636f·6e74·656e·745f·7661·6c75·655f·7661··content_value_va | |||
| 0003be00:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003be10:·706f·6c69·6379·223e·4445·4641·554c·543c··policy">DEFAULT< | |||
| 0003be20:·2f61·6262·723e·0a20·2074·6167·733a·0a20··/abbr>.··tags:.· | |||
| 0003be30:·2020·202d·2061·6c77·6179·730a·0a2d·206e·····-·always..-·n | |||
| 0003be40:·616d·653a·2043·6f6e·6669·6775·7265·2053··ame:·Configure·S | |||
| 0003be50:·7973·7465·6d20·4372·7970·746f·6772·6170··ystem·Cryptograp | |||
| Max diff block lines reached; 1499478/1525062 bytes (98.32%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Intermediate | 60 | ··············Linux·9·-·Intermediate |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 138, 39 lines modified | Offset 138, 14 lines modified | ||
| 138 | » echo·"to·see·what·package·to·(re)install"·>&2 | 138 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 139 | » false··#·end·with·an·error·code | 139 | » false··#·end·with·an·error·code |
| 140 | elif·test·"$rc"·!=·0;·then | 140 | elif·test·"$rc"·!=·0;·then |
| 141 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 141 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 142 | » false··#·end·with·an·error·code | 142 | » false··#·end·with·an·error·code |
| 143 | fi | 143 | fi |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 149 | --- | ||
| 150 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 151 | kind:·MachineConfig | ||
| 152 | spec: | ||
| 153 | ··config: | ||
| 154 | ····ignition: | ||
| 155 | ······version:·3.1.0 | ||
| 156 | ····systemd: | ||
| 157 | ······units: | ||
| 158 | ········-·name:·configure-crypto-policy.service | ||
| 159 | ··········enabled:·true | ||
| 160 | ··········contents:·| | ||
| 161 | ············[Unit] | ||
| 162 | ············Before=kubelet.service | ||
| 163 | ············[Service] | ||
| 164 | ············Type=oneshot | ||
| 165 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 166 | ············RemainAfterExit=yes | ||
| 167 | ············[Install] | ||
| 168 | ············WantedBy=multi-user.target | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 174 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 149 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 175 | ··set_fact: | 150 | ··set_fact: |
| Offset 219, 14 lines modified | Offset 194, 39 lines modified | ||
| 219 | ··-·PCI-DSSv4-2.2.7 | 194 | ··-·PCI-DSSv4-2.2.7 |
| 220 | ··-·configure_crypto_policy | 195 | ··-·configure_crypto_policy |
| 221 | ··-·high_severity | 196 | ··-·high_severity |
| 222 | ··-·low_complexity | 197 | ··-·low_complexity |
| 223 | ··-·low_disruption | 198 | ··-·low_disruption |
| 224 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 225 | ··-·restrict_strategy | 200 | ··-·restrict_strategy |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 206 | --- | ||
| 207 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 208 | kind:·MachineConfig | ||
| 209 | spec: | ||
| 210 | ··config: | ||
| 211 | ····ignition: | ||
| 212 | ······version:·3.1.0 | ||
| 213 | ····systemd: | ||
| 214 | ······units: | ||
| 215 | ········-·name:·configure-crypto-policy.service | ||
| 216 | ··········enabled:·true | ||
| 217 | ··········contents:·| | ||
| 218 | ············[Unit] | ||
| 219 | ············Before=kubelet.service | ||
| 220 | ············[Service] | ||
| 221 | ············Type=oneshot | ||
| 222 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 223 | ············RemainAfterExit=yes | ||
| 224 | ············[Install] | ||
| 225 | ············WantedBy=multi-user.target | ||
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 229 | Severity: ··medium | 229 | Severity: ··medium |
| 230 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 230 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 231 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 231 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 232 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 232 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 2138, 36 lines modified | Offset 2138, 14 lines modified | ||
| 2138 | cat·<<EOF·>/etc/issue | 2138 | cat·<<EOF·>/etc/issue |
| 2139 | $formatted | 2139 | $formatted |
| 2140 | EOF | 2140 | EOF |
| 2141 | else | 2141 | else |
| 2142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2143 | fi | 2143 | fi |
| 2144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2145 | --- | ||
| 2146 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2147 | kind:·MachineConfig | ||
| 2148 | metadata: | ||
| 2149 | ··labels: | ||
| 2150 | ····machineconfiguration.openshift.io/role:·master | ||
| 2151 | ····machineconfiguration.openshift.io/role:·worker | ||
| 2152 | ··name:·75-banner-etc-issue | ||
| 2153 | spec: | ||
| 2154 | ··config: | ||
| 2155 | ····ignition: | ||
| 2156 | ······version:·3.1.0 | ||
| 2157 | ····storage: | ||
| 2158 | ······files: | ||
| 2159 | ······-·contents: | ||
| 2160 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 2161 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 2162 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 2163 | ········mode:·0644 | ||
| 2164 | ········path:·/etc/issue.d/legal-notice | ||
| 2165 | ········overwrite:·true | ||
| 2166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 131779/138840 bytes (94.91%) of diff not shown. | |||
| Offset 14413, 15 lines modified | Offset 14413, 15 lines modified | ||
| 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038530:·3 | 00038530:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15232, 236 lines modified | Offset 15232, 236 lines modified | ||
| 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b860:·6564·6961·7469·6f6e·20 | 0003b860:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b870:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b880:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b890:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8b0:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b8c0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b8d0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b8e0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b8f0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b900:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b910:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b920:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b930:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b940:·6172·6765·743d·2223·6964·6d38·3432·3922··arget="#idm8429" | |||
| 0003b950:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b960:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b970:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b980:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b990:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b9a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b9b0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b | 0003b9c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b9d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b9e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b9f0:·6964·3d22·6964·6d38·3432·3922·3e3c·7461··id="idm8429"><ta | ||
| 0003b | 0003ba00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003ba10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003ba20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003ba30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003ba40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003ba50:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b910:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b920:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b930:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b940:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b950:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003ba60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ba70:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ba80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba90:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003baa0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003bab0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003bac0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003bad0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003bae0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b9a0:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003b | 0003baf0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003bb00:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003bb10:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003bb20:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003bb30:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003bb40:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003bb50:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003bb60:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003bb70:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003bb80:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003bb90:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003bba0:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003bbb0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003bbc0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003bbd0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003bbe0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003bbf0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b | 0003bc00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003bc10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003bc20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b | 0003bc30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b | 0003bc40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b | 0003bc50:·2223·6964·6d38·3433·3022·2074·6162·696e··"#idm8430"·tabin | ||
| 0003b | 0003bc60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b | 0003bc70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b | 0003bc80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b | 0003bc90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ba6 | 0003bca0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ba70:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003ba80:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003ba90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003baa0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bab0:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003bac0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003bad0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bae0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003baf0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bb00:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003bcb0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003bcc0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bcd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bce0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bcf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bd00:·2269·646d·3834·3330·223e·3c74·6162·6c65··"idm8430"><table | |||
| 0003bd10:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bd20:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bd30:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bd40:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd50:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd70:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bd80:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b | 0003bd90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bb30:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003bda0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003bdb0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003bdc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| Max diff block lines reached; 4183749/4216095 bytes (99.23%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 127, 21 lines modified | Offset 127, 19 lines modified | ||
| 127 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 127 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ············_\x8c_\x8i_\x8s············6.1.1 | 131 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 133 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package | 135 | [[packages]] |
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | 143 | #·Remediation·is·applicable·only·in·certain·platforms |
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 171, 38 lines modified | Offset 169, 40 lines modified | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | 169 | ··-·PCI-DSSv4-11.5.2 |
| 172 | ··-·enable_strategy | 170 | ··-·enable_strategy |
| 173 | ··-·low_complexity | 171 | ··-·low_complexity |
| 174 | ··-·low_disruption | 172 | ··-·low_disruption |
| 175 | ··-·medium_severity | 173 | ··-·medium_severity |
| 176 | ··-·no_reboot_needed | 174 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 175 | ··-·package_aide_installed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·--add=aide | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | include·install_aide | 181 | include·install_aide |
| 194 | class·install_aide·{ | 182 | class·install_aide·{ |
| 195 | ··package·{·'aide': | 183 | ··package·{·'aide': |
| 196 | ····ensure·=>·'installed', | 184 | ····ensure·=>·'installed', |
| 197 | ··} | 185 | ··} |
| 198 | } | 186 | } |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·install·aide | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | package·--add=aide | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 204 | To·initiate·a·manual·check,·run·the·following·command: | 204 | To·initiate·a·manual·check,·run·the·following·command: |
| 205 | $·sudo·/usr/sbin/aide·--check | 205 | $·sudo·/usr/sbin/aide·--check |
| Offset 691, 39 lines modified | Offset 691, 14 lines modified | ||
| 691 | » echo·"to·see·what·package·to·(re)install"·>&2 | 691 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 692 | » false··#·end·with·an·error·code | 692 | » false··#·end·with·an·error·code |
| 693 | elif·test·"$rc"·!=·0;·then | 693 | elif·test·"$rc"·!=·0;·then |
| 694 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 694 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 695 | » false··#·end·with·an·error·code | 695 | » false··#·end·with·an·error·code |
| 696 | fi | 696 | fi |
| 697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 698 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 699 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 700 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 701 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 702 | --- | ||
| 703 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 704 | kind:·MachineConfig | ||
| 705 | spec: | ||
| 706 | ··config: | ||
| 707 | ····ignition: | ||
| 708 | ······version:·3.1.0 | ||
| 709 | ····systemd: | ||
| 710 | ······units: | ||
| 711 | ········-·name:·configure-crypto-policy.service | ||
| 712 | ··········enabled:·true | ||
| 713 | ··········contents:·| | ||
| 714 | ············[Unit] | ||
| 715 | ············Before=kubelet.service | ||
| 716 | ············[Service] | ||
| 717 | ············Type=oneshot | ||
| 718 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 719 | ············RemainAfterExit=yes | ||
| 720 | ············[Install] | ||
| 721 | ············WantedBy=multi-user.target | ||
| 722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 390501/396198 bytes (98.56%) of diff not shown. | |||
| Offset 14413, 16 lines modified | Offset 14413, 16 lines modified | ||
| 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038530:·2861·7320·6f66·2032·3032·3 | 00038530:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00038540:·3 | 00038540:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15201, 235 lines modified | Offset 15201, 235 lines modified | ||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | ||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b670:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b670:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b680:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b690:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b6a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b6b0:·646d·3834·3238·223e·3c74·6162·6c65·2063··dm8428"><table·c | |||
| 0003b6c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b6d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b6e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b6f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b700:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b710:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b720:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b730:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b740:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b750:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b760:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b770:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b780:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b790:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b7a0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b7b0:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003b7c0:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003b7d0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b7e0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b7f0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b800:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b810:·7461·7267·6574·3d22·2369·646d·3834·3239··target="#idm8429 | |||
| 0003b820:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b830:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b840:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b850:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b860:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b870:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b880:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b890:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b8a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b8b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b8c0:·2069·643d·2269·646d·3834·3239·223e·3c74···id="idm8429"><t | |||
| 0003b8d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b8e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b8f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b900:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b910:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b920:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b930:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b940:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b950:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b960:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b970:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b980:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b990:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b9a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b9b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b9c0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b9d0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b9e0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b9f0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003ba00:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003ba10:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003ba20:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003ba30:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003ba40:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003ba50:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003ba60:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003ba70:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003ba80:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003ba90:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003baa0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003bab0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003bac0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003bad0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bae0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003baf0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bb00:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bb10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bb20:·3d22·2369·646d·3834·3330·2220·7461·6269··="#idm8430"·tabi | |||
| 0003bb30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bb40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bb50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bb60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bb70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bb80:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b | 0003b680:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 0003b | 0003b690:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b | 0003b6a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b | 0003b6b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b | 0003b6c0:·3d22·6964·6d38·3432·3822·3e3c·7072·653e··="idm8428"><pre> | ||
| 0003b6d0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b6e0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b6f0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003bbe0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bbf0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bc00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bc10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bc20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bc30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bc40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bc50:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bc60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bc70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bc80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bc90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| Max diff block lines reached; 2410112/2442458 bytes (98.68%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 21 lines modified | Offset 122, 19 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package | 130 | [[packages]] |
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 38 lines modified | Offset 164, 40 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 166 | ··-·low_complexity |
| 169 | ··-·low_disruption | 167 | ··-·low_disruption |
| 170 | ··-·medium_severity | 168 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | [[packages]] | ||
| 181 | name·=·"aide" | ||
| 182 | version·=·"*" | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | 176 | include·install_aide |
| 189 | class·install_aide·{ | 177 | class·install_aide·{ |
| 190 | ··package·{·'aide': | 178 | ··package·{·'aide': |
| 191 | ····ensure·=>·'installed', | 179 | ····ensure·=>·'installed', |
| 192 | ··} | 180 | ··} |
| 193 | } | 181 | } |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 686, 39 lines modified | Offset 686, 14 lines modified | ||
| 686 | » echo·"to·see·what·package·to·(re)install"·>&2 | 686 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 687 | » false··#·end·with·an·error·code | 687 | » false··#·end·with·an·error·code |
| 688 | elif·test·"$rc"·!=·0;·then | 688 | elif·test·"$rc"·!=·0;·then |
| 689 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 689 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 690 | » false··#·end·with·an·error·code | 690 | » false··#·end·with·an·error·code |
| 691 | fi | 691 | fi |
| 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 693 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 694 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 695 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 696 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 697 | --- | ||
| 698 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 699 | kind:·MachineConfig | ||
| 700 | spec: | ||
| 701 | ··config: | ||
| 702 | ····ignition: | ||
| 703 | ······version:·3.1.0 | ||
| 704 | ····systemd: | ||
| 705 | ······units: | ||
| 706 | ········-·name:·configure-crypto-policy.service | ||
| 707 | ··········enabled:·true | ||
| 708 | ··········contents:·| | ||
| 709 | ············[Unit] | ||
| 710 | ············Before=kubelet.service | ||
| 711 | ············[Service] | ||
| 712 | ············Type=oneshot | ||
| 713 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 714 | ············RemainAfterExit=yes | ||
| 715 | ············[Install] | ||
| 716 | ············WantedBy=multi-user.target | ||
| 717 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 266150/271857 bytes (97.90%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00038550:·3 | 00038550:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15192, 236 lines modified | Offset 15192, 236 lines modified | ||
| 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | ||
| 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b5e0:·6d65·6469·6174·696f·6e20· | 0003b5e0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b5f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b600:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b610:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b620:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b630:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | |||
| 0003b5f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b600:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b610:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b620:·2069·643d·2269·646d·3834·3238·223e·3c74···id="idm8428"><t | |||
| 0003b630:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b640:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b650:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b660:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b670:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b680:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b690:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b6a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b6b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b6c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b6d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b6e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b6f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b700:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b710:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b720:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 0003b730:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003b740:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b750:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b760:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b770:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b780:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b790:·646d·3834·3239·2220·7461·6269·6e64·6578··dm8429"·tabindex | |||
| 0003b7a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b7b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b7c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b7d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b7e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b7f0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b800:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b810:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b820:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b830:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b840:·3239·223e·3c74·6162·6c65·2063·6c61·7373··29"><table·class | |||
| 0003b850:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b860:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b870:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b880:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b890:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b8a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b8b0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b8c0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b8d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b8e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b8f0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b900:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b910:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b920:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b640:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b650:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b660:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b940:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b950:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b960:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b970:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003b980:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b990:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b9a0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b9b0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003b9c0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003b9d0:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003b9e0:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003b9f0:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003ba00:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003ba10:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003ba20:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003ba30:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b | 0003b670:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 0003b | 0003b680:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b690:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b6a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b6b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b6c0:·7461·7267·6574·3d22·2369·646d·3834·3239··target="#idm8429 | ||
| 0003b | 0003b6d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b6e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b6f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b700:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b710:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b720:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b730:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b740:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b750:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b760:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b770:·2069·643d·2269·646d·3834·3239·223e·3c74···id="idm8429"><t | |||
| 0003b780:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b790:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b7a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b7b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b7c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b7d0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b7e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b7f0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b800:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| Max diff block lines reached; 2121928/2154412 bytes (98.49%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 21 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package | 129 | [[packages]] |
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 165, 38 lines modified | Offset 163, 40 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 165 | ··-·low_complexity |
| 168 | ··-·low_disruption | 166 | ··-·low_disruption |
| 169 | ··-·medium_severity | 167 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | 175 | include·install_aide |
| 188 | class·install_aide·{ | 176 | class·install_aide·{ |
| 189 | ··package·{·'aide': | 177 | ··package·{·'aide': |
| 190 | ····ensure·=>·'installed', | 178 | ····ensure·=>·'installed', |
| 191 | ··} | 179 | ··} |
| 192 | } | 180 | } |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·install·aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 685, 39 lines modified | Offset 685, 14 lines modified | ||
| 685 | » echo·"to·see·what·package·to·(re)install"·>&2 | 685 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 686 | » false··#·end·with·an·error·code | 686 | » false··#·end·with·an·error·code |
| 687 | elif·test·"$rc"·!=·0;·then | 687 | elif·test·"$rc"·!=·0;·then |
| 688 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 688 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 689 | » false··#·end·with·an·error·code | 689 | » false··#·end·with·an·error·code |
| 690 | fi | 690 | fi |
| 691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 692 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 693 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 694 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 695 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 696 | --- | ||
| 697 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 698 | kind:·MachineConfig | ||
| 699 | spec: | ||
| 700 | ··config: | ||
| 701 | ····ignition: | ||
| 702 | ······version:·3.1.0 | ||
| 703 | ····systemd: | ||
| 704 | ······units: | ||
| 705 | ········-·name:·configure-crypto-policy.service | ||
| 706 | ··········enabled:·true | ||
| 707 | ··········contents:·| | ||
| 708 | ············[Unit] | ||
| 709 | ············Before=kubelet.service | ||
| 710 | ············[Service] | ||
| 711 | ············Type=oneshot | ||
| 712 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 713 | ············RemainAfterExit=yes | ||
| 714 | ············[Install] | ||
| 715 | ············WantedBy=multi-user.target | ||
| 716 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 238679/244317 bytes (97.69%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00038550:·3 | 00038550:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15224, 235 lines modified | Offset 15224, 235 lines modified | ||
| 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | ||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7e0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b7f0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b800:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b810:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b820:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b830:·2269·646d·3834·3238·223e·3c70·7265·3e3c··"idm8428"><pre>< | |||
| 0003b840:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b850:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b860:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b7e0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003b7f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b800:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b810:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b820:·6d38·3432·3822·3e3c·7461·626c·6520·636c··m8428"><table·cl | |||
| 0003b830:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b840:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b850:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b860:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b870:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b880:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b890:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8a0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b8c0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b8d0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b8e0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b8f0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b900:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b910:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003b920:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003b930:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003b940:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b950:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b960:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b970:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b980:·6172·6765·743d·2223·6964·6d38·3432·3922··arget="#idm8429" | |||
| 0003b990:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b9a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b9b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b9c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b9d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b9e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b9f0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ba00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ba10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ba20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ba30:·6964·3d22·6964·6d38·3432·3922·3e3c·7461··id="idm8429"><ta | |||
| 0003ba40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ba50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ba60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ba70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ba80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ba90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003baa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bab0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003bac0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bad0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003bae0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003baf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bb00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bb10:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bb20:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003bb30:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003bb40:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003bb50:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003bb60:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003bb70:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003bb80:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003bb90:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003bba0:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003bbb0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003bbc0:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003bbd0:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003bbe0:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003bbf0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003bc00:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003bc10:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003bc20:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003bc30:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b | 0003b870:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003b880:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003b890:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b | 0003b8a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b | 0003b8b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b | 0003b8c0:·2223·6964·6d38·3432·3922·2074·6162·696e··"#idm8429"·tabin | ||
| 0003b | 0003b8d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b | 0003b8e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b | 0003b8f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b | 0003b900:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b910:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b920:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b930:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b940:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b950:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b960:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b970:·6d38·3432·3922·3e3c·7461·626c·6520·636c··m8429"><table·cl | |||
| 0003b980:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b990:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b9a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b9b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b9c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b9d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b9e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| Max diff block lines reached; 4038317/4070663 bytes (99.21%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 126, 21 lines modified | Offset 126, 19 lines modified | ||
| 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8c_\x8i_\x8s············6.1.1 | 130 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 132 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package | 134 | [[packages]] |
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | 142 | #·Remediation·is·applicable·only·in·certain·platforms |
| 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 170, 38 lines modified | Offset 168, 40 lines modified | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | 168 | ··-·PCI-DSSv4-11.5.2 |
| 171 | ··-·enable_strategy | 169 | ··-·enable_strategy |
| 172 | ··-·low_complexity | 170 | ··-·low_complexity |
| 173 | ··-·low_disruption | 171 | ··-·low_disruption |
| 174 | ··-·medium_severity | 172 | ··-·medium_severity |
| 175 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 176 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·--add=aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | [[packages]] | ||
| 185 | name·=·"aide" | ||
| 186 | version·=·"*" | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | 180 | include·install_aide |
| 193 | class·install_aide·{ | 181 | class·install_aide·{ |
| 194 | ··package·{·'aide': | 182 | ··package·{·'aide': |
| 195 | ····ensure·=>·'installed', | 183 | ····ensure·=>·'installed', |
| 196 | ··} | 184 | ··} |
| 197 | } | 185 | } |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·--add=aide | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 203 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 204 | $·sudo·/usr/sbin/aide·--check |
| Offset 690, 39 lines modified | Offset 690, 14 lines modified | ||
| 690 | » echo·"to·see·what·package·to·(re)install"·>&2 | 690 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 691 | » false··#·end·with·an·error·code | 691 | » false··#·end·with·an·error·code |
| 692 | elif·test·"$rc"·!=·0;·then | 692 | elif·test·"$rc"·!=·0;·then |
| 693 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 693 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 694 | » false··#·end·with·an·error·code | 694 | » false··#·end·with·an·error·code |
| 695 | fi | 695 | fi |
| 696 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 697 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 698 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 699 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 700 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 701 | --- | ||
| 702 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 703 | kind:·MachineConfig | ||
| 704 | spec: | ||
| 705 | ··config: | ||
| 706 | ····ignition: | ||
| 707 | ······version:·3.1.0 | ||
| 708 | ····systemd: | ||
| 709 | ······units: | ||
| 710 | ········-·name:·configure-crypto-policy.service | ||
| 711 | ··········enabled:·true | ||
| 712 | ··········contents:·| | ||
| 713 | ············[Unit] | ||
| 714 | ············Before=kubelet.service | ||
| 715 | ············[Service] | ||
| 716 | ············Type=oneshot | ||
| 717 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 718 | ············RemainAfterExit=yes | ||
| 719 | ············[Install] | ||
| 720 | ············WantedBy=multi-user.target | ||
| 721 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 696 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 375621/381259 bytes (98.52%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038770:·3032·3 | 00038770:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15647, 347 lines modified | Offset 15647, 347 lines modified | ||
| 0003d1e0:·6574·3d22·2369·646d·3839·3834·2220·7461··et="#idm8984"·ta | 0003d1e0:·6574·3d22·2369·646d·3839·3834·2220·7461··et="#idm8984"·ta | ||
| 0003d1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003d1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003d200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003d200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003d210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003d210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003d220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003d220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003d230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003d230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003d240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003d240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003d250:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003d260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003d270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003d280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003d290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003d2a0:·6d38·3938·3422·3e3c·7072·653e·3c63·6f64··m8984"><pre><cod | |||
| 0003d2b0:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 0003d2c0:·6e73·5d0a·6669·7073·203d·2074·7275·650a··ns].fips·=·true. | |||
| 0003d2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003d2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003d2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003d300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003d310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003d320:·3d22·2369·646d·3839·3835·2220·7461·6269··="#idm8985"·tabi | |||
| 0003d330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003d340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003d350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003d360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003d370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003d380:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003d | 0003d390:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003d | 0003d3a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003d | 0003d3b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003d | 0003d3c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003d | 0003d3d0:·646d·3839·3835·223e·3c70·7265·3e3c·636f··dm8985"><pre><co | ||
| 0003d | 0003d3e0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003d | 0003d3f0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003d | 0003d400:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003d | 0003d410:·6c61·7466·6f72·6d73·0a69·6620·2820·5b20··latforms.if·(·[· | ||
| 0003d | 0003d420:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 0003d | 0003d430:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 0003d | 0003d440:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 0003d | 0003d450:·696e·6572·656e·7620·5d20·2661·6d70·3b26··inerenv·]·&& | ||
| 0003d | 0003d460:·616d·703b·2021·2028·205b·2022·247b·636f··amp;·!·(·[·"${co | ||
| 0003d | 0003d470:·6e74·6169·6e65·723a·2d7d·2220·3d3d·2022··ntainer:-}"·==·" | ||
| 0003d | 0003d480:·6277·7261·702d·6f73·6275·696c·6422·205d··bwrap-osbuild"·] | ||
| 0003d | 0003d490:·2029·2029·2026·616d·703b·2661·6d70·3b20···)·)·&&· | ||
| 0003d | 0003d4a0:·7b20·5b20·2120·2d66·202f·2e64·6f63·6b65··{·[·!·-f·/.docke | ||
| 0003d | 0003d4b0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | ||
| 0003d | 0003d4c0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | ||
| 0003d | 0003d4d0:·6f6e·7461·696e·6572·656e·7620·5d3b·207d··ontainerenv·];·} | ||
| 0003d | 0003d4e0:·3b20·7468·656e·0a0a·7661·725f·7379·7374··;·then..var_syst | ||
| 0003d4f0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003d500:·3d27·3c61·6262·7220·7469·746c·653d·2266··='<abbr·title="f | |||
| 0003d510:·726f·6d20·5072·6f66·696c·652f·7265·6669··rom·Profile/refi | |||
| 0003d520:·6e65·2d76·616c·7565·3a20·7863·6364·665f··ne-value:·xccdf_ | |||
| 0003d530:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | |||
| 0003d540:·6f6e·7465·6e74·5f76·616c·7565·5f76·6172··ontent_value_var | |||
| 0003d550:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003d560:·6f6c·6963·7922·3e46·4950·533c·2f61·6262··olicy">FIPS</abb | |||
| 0003d570:·723e·270a·0a0a·6669·7073·2d6d·6f64·652d··r>'...fips-mode- | |||
| 0003d580:·7365·7475·7020·2d2d·656e·6162·6c65·0a0a··setup·--enable.. | |||
| 0003d590:·7374·6465·7272·5f6f·665f·6361·6c6c·3d24··stderr_of_call=$ | |||
| 0003d5a0:·2875·7064·6174·652d·6372·7970·746f·2d70··(update-crypto-p | |||
| 0003d5b0:·6f6c·6963·6965·7320·2d2d·7365·7420·247b··olicies·--set·${ | |||
| 0003d5c0:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003d5d0:·6f5f·706f·6c69·6379·7d20·3226·6774·3b26··o_policy}·2>& | |||
| 0003d5e0:·616d·703b·3120·2667·743b·202f·6465·762f··amp;1·>·/dev/ | |||
| 0003d5f0:·6e75·6c6c·290a·7263·3d24·3f0a·0a69·6620··null).rc=$?..if· | |||
| 0003d600:·7465·7374·2022·2472·6322·203d·2031·3237··test·"$rc"·=·127 | |||
| 0003d610:·3b20·7468·656e·0a09·6563·686f·2022·2473··;·then..echo·"$s | |||
| 0003d620:·7464·6572·725f·6f66·5f63·616c·6c22·2026··tderr_of_call"·& | |||
| 0003d630:·6774·3b26·616d·703b·320a·0965·6368·6f20··gt;&2..echo· | |||
| 0003d640:·224d·616b·6520·7375·7265·2074·6861·7420··"Make·sure·that· | |||
| 0003d650:·7468·6520·7363·7269·7074·2069·7320·696e··the·script·is·in | |||
| 0003d660:·7374·616c·6c65·6420·6f6e·2074·6865·2072··stalled·on·the·r | |||
| 0003d670:·656d·6564·6961·7465·6420·7379·7374·656d··emediated·system | |||
| 0003d680:·2e22·2026·6774·3b26·616d·703b·320a·0965··."·>&2..e | |||
| 0003d690:·6368·6f20·2253·6565·206f·7574·7075·7420··cho·"See·output· | |||
| 0003d6a0:·6f66·2074·6865·2027·646e·6620·7072·6f76··of·the·'dnf·prov | |||
| 0003d6b0:·6964·6573·2075·7064·6174·652d·6372·7970··ides·update-cryp | |||
| 0003d6c0:·746f·2d70·6f6c·6963·6965·7327·2063·6f6d··to-policies'·com | |||
| 0003d6d0:·6d61·6e64·2220·2667·743b·2661·6d70·3b32··mand"·>&2 | |||
| 0003d6e0:·0a09·6563·686f·2022·746f·2073·6565·2077··..echo·"to·see·w | |||
| 0003d6f0:·6861·7420·7061·636b·6167·6520·746f·2028··hat·package·to·( | |||
| 0003d700:·7265·2969·6e73·7461·6c6c·2220·2667·743b··re)install"·> | |||
| 0003d710:·2661·6d70·3b32·0a0a·0966·616c·7365·2020··&2...false·· | |||
| 0003d720:·2320·656e·6420·7769·7468·2061·6e20·6572··#·end·with·an·er | |||
| 0003d730:·726f·7220·636f·6465·0a65·6c69·6620·7465··ror·code.elif·te | |||
| 0003d740:·7374·2022·2472·6322·2021·3d20·303b·2074··st·"$rc"·!=·0;·t | |||
| 0003d750:·6865·6e0a·0965·6368·6f20·2245·7272·6f72··hen..echo·"Error | |||
| 0003d760:·2069·6e76·6f6b·696e·6720·7468·6520·7570···invoking·the·up | |||
| 0003d770:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003d780:·6369·6573·2073·6372·6970·743a·2024·7374··cies·script:·$st | |||
| 0003d790:·6465·7272·5f6f·665f·6361·6c6c·2220·2667··derr_of_call"·&g | |||
| 0003d7a0:·743b·2661·6d70·3b32·0a09·6661·6c73·6520··t;&2..false· | |||
| 0003d7b0:·2023·2065·6e64·2077·6974·6820·616e·2065···#·end·with·an·e | |||
| 0003d7c0:·7272·6f72·2063·6f64·650a·6669·0a0a·656c··rror·code.fi..el | |||
| 0003d7d0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003d7e0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003d7f0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003d800:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003d810:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003d820:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d830:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d840:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d850:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d860:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d870:·646d·3839·3837·2220·7461·6269·6e64·6578··dm8987"·tabindex | |||
| 0003d880:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d890:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d8a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d8b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d8c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| Max diff block lines reached; 2663126/2710790 bytes (98.24%) of diff not shown. | |||
| Offset 68, 15 lines modified | Offset 68, 15 lines modified | ||
| 68 | ··············Systems·and·Organizations·(NIST·800-171) | 68 | ··············Systems·and·Organizations·(NIST·800-171) |
| 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:9 | 71 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 72 | ····*·cpe:/o:centos:centos:9 | 72 | ····*·cpe:/o:centos:centos:9 |
| 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 219, 14 lines modified | Offset 219, 18 lines modified | ||
| 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 220 | ············_\x8i_\x8s_\x8m······1446 | 220 | ············_\x8i_\x8s_\x8m······1446 |
| 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 227 | [customizations] | ||
| 228 | fips·=·true | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | 230 | #·Remediation·is·applicable·only·in·certain·platforms |
| 228 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 231 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 229 | var_system_crypto_policy='FIPS' | 232 | var_system_crypto_policy='FIPS' |
| Offset 353, 18 lines modified | Offset 357, 14 lines modified | ||
| 353 | ··-·NIST-800-53-SC-13 | 357 | ··-·NIST-800-53-SC-13 |
| 354 | ··-·enable_fips_mode | 358 | ··-·enable_fips_mode |
| 355 | ··-·high_severity | 359 | ··-·high_severity |
| 356 | ··-·medium_complexity | 360 | ··-·medium_complexity |
| 357 | ··-·medium_disruption | 361 | ··-·medium_disruption |
| 358 | ··-·reboot_required | 362 | ··-·reboot_required |
| 359 | ··-·restrict_strategy | 363 | ··-·restrict_strategy |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 361 | [customizations] | ||
| 362 | fips·=·true | ||
| 363 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 364 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 364 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 365 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 365 | ····*·GnuTLS·library | 366 | ····*·GnuTLS·library |
| 366 | ····*·OpenSSL·library | 367 | ····*·OpenSSL·library |
| 367 | ····*·NSS·library | 368 | ····*·NSS·library |
| 368 | ····*·OpenJDK | 369 | ····*·OpenJDK |
| 369 | ····*·Libkrb5 | 370 | ····*·Libkrb5 |
| Offset 376, 21 lines modified | Offset 376, 19 lines modified | ||
| 376 | $·sudo·dnf·install·crypto-policies | 376 | $·sudo·dnf·install·crypto-policies |
| 377 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 377 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 378 | Severity: ··medium | 378 | Severity: ··medium |
| 379 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 379 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 380 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 380 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 381 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 381 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 382 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 382 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 388 | package | 384 | [[packages]] |
| 385 | name·=·"crypto-policies" | ||
| 386 | version·=·"*" | ||
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 394 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 392 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 409, 38 lines modified | Offset 407, 40 lines modified | ||
| 409 | ··-·DISA-STIG-RHEL-09-672010 | 407 | ··-·DISA-STIG-RHEL-09-672010 |
| 410 | ··-·enable_strategy | 408 | ··-·enable_strategy |
| 411 | ··-·low_complexity | 409 | ··-·low_complexity |
| 412 | ··-·low_disruption | 410 | ··-·low_disruption |
| 413 | ··-·medium_severity | 411 | ··-·medium_severity |
| 414 | ··-·no_reboot_needed | 412 | ··-·no_reboot_needed |
| 415 | ··-·package_crypto-policies_installed | 413 | ··-·package_crypto-policies_installed |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 421 | package·--add=crypto-policies | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 423 | [[packages]] | ||
| 424 | name·=·"crypto-policies" | ||
| 425 | version·=·"*" | ||
| 426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 415 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 416 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 417 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 418 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 431 | include·install_crypto-policies | 419 | include·install_crypto-policies |
| 432 | class·install_crypto-policies·{ | 420 | class·install_crypto-policies·{ |
| 433 | ··package·{·'crypto-policies': | 421 | ··package·{·'crypto-policies': |
| 434 | ····ensure·=>·'installed', | 422 | ····ensure·=>·'installed', |
| 435 | ··} | 423 | ··} |
| 436 | } | 424 | } |
| 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 430 | package·install·crypto-policies | ||
| 431 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 432 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 433 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 434 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 435 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 436 | package·--add=crypto-policies | ||
| 437 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 437 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 438 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 438 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 439 | $·sudo·update-crypto-policies·--set·FIPS | 439 | $·sudo·update-crypto-policies·--set·FIPS |
| Max diff block lines reached; 354638/361677 bytes (98.05%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2028·6173·206f·6620·3230·323 | 00038540:·2020·2028·6173·206f·6620·3230·3236·2d30·····(as·of·2026-0 | ||
| 00038550:·3 | 00038550:·312d·3238·290a·2020·2020·2020·2020·2020··1-28).·········· | ||
| 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 17352, 188 lines modified | Offset 17352, 188 lines modified | ||
| 00043c70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00043c70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00043c80:·3931·3839·2220·7461·6269·6e64·6578·3d22··9189"·tabindex=" | 00043c80:·3931·3839·2220·7461·6269·6e64·6578·3d22··9189"·tabindex=" | ||
| 00043c90:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00043c90:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00043ca0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00043ca0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00043cb0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00043cb0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00043cc0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00043cc0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00043cd0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00043cd0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00043ce0:·6469·6174·696f·6e20·4 | 00043ce0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00043cf0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00043d00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00043d10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00043d20:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 00043d30:·3138·3922·3e3c·7461·626c·6520·636c·6173··189"><table·clas | |||
| 00043d40:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00043d50:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00043d60:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00043d70:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00043d80:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00043cf0:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00043d00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00043d10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00043d20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00043d30:·646d·3931·3839·223e·3c74·6162·6c65·2063··dm9189"><table·c | |||
| 00043d40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00043d50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00043d60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00043d70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00043d80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00043d90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00043da0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00043db0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00043d | 00043d90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00043dd0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00043d | 00043da0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00043db0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00043dc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00043dd0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00043de0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00043df0:· | 00043df0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00043e00:· | 00043e00:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 00043e10:· | 00043e10:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 00043e20:· | 00043e20:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 00043e30:·206e·616d·653a·2058·4343·4446·2056·616c···name:·XCCDF·Val | |||
| 00043e40:·7565·2076·6172·5f73·7973·7465·6d5f·6372··ue·var_system_cr | |||
| 00043e50:·7970·746f·5f70·6f6c·6963·7920·2320·7072··ypto_policy·#·pr | |||
| 00043e60:·6f6d·6f74·6520·746f·2076·6172·6961·626c··omote·to·variabl | |||
| 00043e70:·650a·2020·7365·745f·6661·6374·3a0a·2020··e.··set_fact:.·· | |||
| 00043e30:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 00043e40:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 00043e50:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 00043e60:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 00043e70:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 00043e80:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 00043e90:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 00043ea0:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 00043eb0:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 00043ec0:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 00043ed0:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 00043ee0:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 00043ef0:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00043f00:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 00043f10:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 00043f20:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 00043f30:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 00043f40:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 00043f50:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 00043f60:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 00043f70:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 00043f80:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 00043f90:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 00043fa0:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 00043fb0:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 00043 | 00043e80:·2020·7661·725f·7379·7374·656d·5f63·7279····var_system_cry | ||
| 00043fd0:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 00043fe0:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 00043ff0:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 00044000:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 00044010:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 00044020:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 00044030:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 00044040:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00044050:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00044060:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00044070:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00044080:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | |||
| 00044090:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | |||
| 000440a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000440b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000440c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000440d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000440e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000440f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00044100:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00044110:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00044120:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00044130:·6170·7365·2220·6964·3d22·6964·6d39·3139··apse"·id="idm919 | |||
| 00044140:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 00044150:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00044160:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00044170:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00044180:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00044190:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 000441a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000441b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 000441c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000441d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000441e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 000441f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00044200:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00044210:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| Max diff block lines reached; 1752685/1778545 bytes (98.55%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 592, 39 lines modified | Offset 592, 14 lines modified | ||
| 592 | » echo·"to·see·what·package·to·(re)install"·>&2 | 592 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 593 | » false··#·end·with·an·error·code | 593 | » false··#·end·with·an·error·code |
| 594 | elif·test·"$rc"·!=·0;·then | 594 | elif·test·"$rc"·!=·0;·then |
| 595 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 595 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 596 | » false··#·end·with·an·error·code | 596 | » false··#·end·with·an·error·code |
| 597 | fi | 597 | fi |
| 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 603 | --- | ||
| 604 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 605 | kind:·MachineConfig | ||
| 606 | spec: | ||
| 607 | ··config: | ||
| 608 | ····ignition: | ||
| 609 | ······version:·3.1.0 | ||
| 610 | ····systemd: | ||
| 611 | ······units: | ||
| 612 | ········-·name:·configure-crypto-policy.service | ||
| 613 | ··········enabled:·true | ||
| 614 | ··········contents:·| | ||
| 615 | ············[Unit] | ||
| 616 | ············Before=kubelet.service | ||
| 617 | ············[Service] | ||
| 618 | ············Type=oneshot | ||
| 619 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 620 | ············RemainAfterExit=yes | ||
| 621 | ············[Install] | ||
| 622 | ············WantedBy=multi-user.target | ||
| 623 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 624 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 625 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 626 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 627 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 628 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 603 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 629 | ··set_fact: | 604 | ··set_fact: |
| Offset 673, 14 lines modified | Offset 648, 39 lines modified | ||
| 673 | ··-·PCI-DSSv4-2.2.7 | 648 | ··-·PCI-DSSv4-2.2.7 |
| 674 | ··-·configure_crypto_policy | 649 | ··-·configure_crypto_policy |
| 675 | ··-·high_severity | 650 | ··-·high_severity |
| 676 | ··-·low_complexity | 651 | ··-·low_complexity |
| 677 | ··-·low_disruption | 652 | ··-·low_disruption |
| 678 | ··-·no_reboot_needed | 653 | ··-·no_reboot_needed |
| 679 | ··-·restrict_strategy | 654 | ··-·restrict_strategy |
| 655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 656 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 657 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 658 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 659 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 660 | --- | ||
| 661 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 662 | kind:·MachineConfig | ||
| 663 | spec: | ||
| 664 | ··config: | ||
| 665 | ····ignition: | ||
| 666 | ······version:·3.1.0 | ||
| 667 | ····systemd: | ||
| 668 | ······units: | ||
| 669 | ········-·name:·configure-crypto-policy.service | ||
| 670 | ··········enabled:·true | ||
| 671 | ··········contents:·| | ||
| 672 | ············[Unit] | ||
| 673 | ············Before=kubelet.service | ||
| 674 | ············[Service] | ||
| 675 | ············Type=oneshot | ||
| 676 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 677 | ············RemainAfterExit=yes | ||
| 678 | ············[Install] | ||
| 679 | ············WantedBy=multi-user.target | ||
| 680 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 680 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 681 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 681 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 682 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 682 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 683 | Severity: ··medium | 683 | Severity: ··medium |
| 684 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 684 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 685 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 685 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 686 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 686 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1013, 21 lines modified | Offset 1013, 19 lines modified | ||
| 1013 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 1013 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 1014 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1014 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1015 | The·rear·package·can·be·installed·with·the·following·command: | 1015 | The·rear·package·can·be·installed·with·the·following·command: |
| 1016 | $·sudo·dnf·install·rear | 1016 | $·sudo·dnf·install·rear |
| 1017 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1017 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1018 | Severity: ·medium | 1018 | Severity: ·medium |
| 1019 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 1019 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1021 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1022 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1023 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1024 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1025 | package | 1021 | [[packages]] |
| 1022 | name·=·"rear" | ||
| 1023 | version·=·"*" | ||
| 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1024 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1025 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1026 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1027 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1028 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1031 | #·Remediation·is·applicable·only·in·certain·platforms | 1029 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1032 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 1030 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1056, 38 lines modified | Offset 1054, 40 lines modified | ||
| 1056 | ··tags: | 1054 | ··tags: |
| 1057 | ··-·enable_strategy | 1055 | ··-·enable_strategy |
| 1058 | ··-·low_complexity | 1056 | ··-·low_complexity |
| 1059 | ··-·low_disruption | 1057 | ··-·low_disruption |
| 1060 | ··-·medium_severity | 1058 | ··-·medium_severity |
| 1061 | ··-·no_reboot_needed | 1059 | ··-·no_reboot_needed |
| Max diff block lines reached; 158143/164905 bytes (95.90%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038680:·6173·206f·6620·3230·323 | 00038680:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16760, 187 lines modified | Offset 16760, 187 lines modified | ||
| 00041770:·7461·7267·6574·3d22·2369·646d·3931·3839··target="#idm9189 | 00041770:·7461·7267·6574·3d22·2369·646d·3931·3839··target="#idm9189 | ||
| 00041780:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00041780:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00041790:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00041790:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000417a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000417a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000417b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000417b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000417c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000417c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000417d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000417d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 000417e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000417f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00041800:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041810:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041820:·7365·2220·6964·3d22·6964·6d39·3138·3922··se"·id="idm9189" | |||
| 00041830:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00041840:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000417e0:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 000417f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00041800:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00041810:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041820:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 00041830:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 00041840:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041850:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000418 | 00041850:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00041860:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00041870:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00041880:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00041870:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041880:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041890:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000418a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000418b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000418 | 00041890:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 000418 | 000418a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 000418b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000418c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000418d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 000418e0:·7 | 000418e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 000418f0:· | 000418f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00041900:· | 00041900:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 00041910:· | 00041910:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 00041920:·653e·3c70·7265·3e3c·636f·6465·3e2d·2d2d··e><pre><code>--- | |||
| 00041930:·0a61·7069·5665·7273·696f·6e3a·206d·6163··.apiVersion:·mac | |||
| 00041940:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | |||
| 00041950:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | |||
| 00041960:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | |||
| 00041970:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | |||
| 00041980:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | |||
| 00041990:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | |||
| 000419a0:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | |||
| 000419b0:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | |||
| 000419c0:·733a·0a20·2020·2020·2020·202d·206e·616d··s:.········-·nam | |||
| 000419d0:·653a·2063·6f6e·6669·6775·7265·2d63·7279··e:·configure-cry | |||
| 000419e0:·7074·6f2d·706f·6c69·6379·2e73·6572·7669··pto-policy.servi | |||
| 000419f0:·6365·0a20·2020·2020·2020·2020·2065·6e61··ce.··········ena | |||
| 00041a00:·626c·6564·3a20·7472·7565·0a20·2020·2020··bled:·true.····· | |||
| 00041a10:·2020·2020·2063·6f6e·7465·6e74·733a·207c·······contents:·| | |||
| 00041a20:·0a20·2020·2020·2020·2020·2020·205b·556e··.············[Un | |||
| 00041a30:·6974·5d0a·2020·2020·2020·2020·2020·2020··it].············ | |||
| 00041a40:·4265·666f·7265·3d6b·7562·656c·6574·2e73··Before=kubelet.s | |||
| 00041a50:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00041a60:·2020·205b·5365·7276·6963·655d·0a20·2020·····[Service].··· | |||
| 00041a70:·2020·2020·2020·2020·2054·7970·653d·6f6e···········Type=on | |||
| 00041a80:·6573·686f·740a·2020·2020·2020·2020·2020··eshot.·········· | |||
| 00041a90:·2020·4578·6563·5374·6172·743d·7570·6461····ExecStart=upda | |||
| 00041aa0:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 00041ab0:·6573·202d·2d73·6574·207b·7b2e·7661·725f··es·--set·{{.var_ | |||
| 00041ac0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00041ad0:·6c69·6379·7d7d·0a20·2020·2020·2020·2020··licy}}.········· | |||
| 00041ae0:·2020·2052·656d·6169·6e41·6674·6572·4578·····RemainAfterEx | |||
| 00041af0:·6974·3d79·6573·0a20·2020·2020·2020·2020··it=yes.········· | |||
| 00041b00:·2020·205b·496e·7374·616c·6c5d·0a20·2020·····[Install].··· | |||
| 00041b10:·2020·2020·2020·2020·2057·616e·7465·6442···········WantedB | |||
| 00041b20:·793d·6d75·6c74·692d·7573·6572·2e74·6172··y=multi-user.tar | |||
| 00041b30:·6765·740a·3c2f·636f·6465·3e3c·2f70·7265··get.</code></pre | |||
| 00041b40:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00041b50:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00041b60:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00041b70:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00041b80:·7267·6574·3d22·2369·646d·3931·3930·2220··rget="#idm9190"· | |||
| 00041b90:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00041ba0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00041bb0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00041bc0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00041bd0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00041be0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00041bf0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00041c00:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00041c10:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00041c20:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00041c30:·2220·6964·3d22·6964·6d39·3139·3022·3e3c··"·id="idm9190">< | |||
| 00041c40:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00041c50:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00041c60:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00041c70:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00041c80:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00041c90:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00041ca0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00041cb0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00041cc0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00041cd0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00041ce0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00041cf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00041d00:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00041d10:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 00041d20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00041 | 00041920:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 00041 | 00041930:·653a·2058·4343·4446·2056·616c·7565·2076··e:·XCCDF·Value·v | ||
| 00041940:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 00041950:·5f70·6f6c·6963·7920·2320·7072·6f6d·6f74··_policy·#·promot | |||
| 00041960:·6520·746f·2076·6172·6961·626c·650a·2020··e·to·variable.·· | |||
| 00041970:·7365·745f·6661·6374·3a0a·2020·2020·7661··set_fact:.····va | |||
| Max diff block lines reached; 1785443/1811027 bytes (98.59%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:9 | 67 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 68 | ····*·cpe:/o:centos:centos:9 | 68 | ····*·cpe:/o:centos:centos:9 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 463, 39 lines modified | Offset 463, 14 lines modified | ||
| 463 | » echo·"to·see·what·package·to·(re)install"·>&2 | 463 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 464 | » false··#·end·with·an·error·code | 464 | » false··#·end·with·an·error·code |
| 465 | elif·test·"$rc"·!=·0;·then | 465 | elif·test·"$rc"·!=·0;·then |
| 466 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 466 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 467 | » false··#·end·with·an·error·code | 467 | » false··#·end·with·an·error·code |
| 468 | fi | 468 | fi |
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 470 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 471 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 472 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 473 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 474 | --- | ||
| 475 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 476 | kind:·MachineConfig | ||
| 477 | spec: | ||
| 478 | ··config: | ||
| 479 | ····ignition: | ||
| 480 | ······version:·3.1.0 | ||
| 481 | ····systemd: | ||
| 482 | ······units: | ||
| 483 | ········-·name:·configure-crypto-policy.service | ||
| 484 | ··········enabled:·true | ||
| 485 | ··········contents:·| | ||
| 486 | ············[Unit] | ||
| 487 | ············Before=kubelet.service | ||
| 488 | ············[Service] | ||
| 489 | ············Type=oneshot | ||
| 490 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 491 | ············RemainAfterExit=yes | ||
| 492 | ············[Install] | ||
| 493 | ············WantedBy=multi-user.target | ||
| 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 470 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 471 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 472 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 473 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 499 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 474 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 500 | ··set_fact: | 475 | ··set_fact: |
| Offset 544, 14 lines modified | Offset 519, 39 lines modified | ||
| 544 | ··-·PCI-DSSv4-2.2.7 | 519 | ··-·PCI-DSSv4-2.2.7 |
| 545 | ··-·configure_crypto_policy | 520 | ··-·configure_crypto_policy |
| 546 | ··-·high_severity | 521 | ··-·high_severity |
| 547 | ··-·low_complexity | 522 | ··-·low_complexity |
| 548 | ··-·low_disruption | 523 | ··-·low_disruption |
| 549 | ··-·no_reboot_needed | 524 | ··-·no_reboot_needed |
| 550 | ··-·restrict_strategy | 525 | ··-·restrict_strategy |
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 527 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 528 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 529 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 530 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 531 | --- | ||
| 532 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 533 | kind:·MachineConfig | ||
| 534 | spec: | ||
| 535 | ··config: | ||
| 536 | ····ignition: | ||
| 537 | ······version:·3.1.0 | ||
| 538 | ····systemd: | ||
| 539 | ······units: | ||
| 540 | ········-·name:·configure-crypto-policy.service | ||
| 541 | ··········enabled:·true | ||
| 542 | ··········contents:·| | ||
| 543 | ············[Unit] | ||
| 544 | ············Before=kubelet.service | ||
| 545 | ············[Service] | ||
| 546 | ············Type=oneshot | ||
| 547 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 548 | ············RemainAfterExit=yes | ||
| 549 | ············[Install] | ||
| 550 | ············WantedBy=multi-user.target | ||
| 551 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 551 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 552 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 552 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 553 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 553 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 554 | Severity: ··medium | 554 | Severity: ··medium |
| 555 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 555 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 556 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 556 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 557 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 557 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1513, 21 lines modified | Offset 1513, 18 lines modified | ||
| 1513 | ············_\x8c_\x8u_\x8i·····3.4.5 | 1513 | ············_\x8c_\x8u_\x8i·····3.4.5 |
| 1514 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1514 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1515 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1515 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1516 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1516 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1517 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1517 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1518 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1518 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1519 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule | 1519 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule |
| 1520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1525 | 1521 | [customizations.services] | |
| 1522 | masked·=·["debug-shell"] | ||
| 1526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1527 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1528 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1529 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1530 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1531 | #·Remediation·is·applicable·only·in·certain·platforms | 1528 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1532 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1529 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1545, 33 lines modified | Offset 1542, 14 lines modified | ||
| 1545 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1542 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1546 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1543 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1547 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1544 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1548 | else | 1545 | else |
| 1549 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1546 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1550 | fi | 1547 | fi |
| Max diff block lines reached; 131718/138362 bytes (95.20%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038610:·6173·206f·6620·3230·323 | 00038610:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 17198, 236 lines modified | Offset 17198, 236 lines modified | ||
| 000432d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 000432d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 000432e0:·2223·6964·6d38·3432·3822·2074·6162·696e··"#idm8428"·tabin | 000432e0:·2223·6964·6d38·3432·3822·2074·6162·696e··"#idm8428"·tabin | ||
| 000432f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 000432f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00043300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00043300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00043310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00043310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00043320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00043320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00043330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00043330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00043340:·3e52·656d·6564·6961·7469·6f6e·20 | 00043340:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00043350:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00043350:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00043360:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00043370:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00043380:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | |||
| 00043390:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000433a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000433b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000433c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000433d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000433e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000433f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00043400:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00043410:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043420:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00043430:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00043440:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00043450:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00043460:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00043470:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00043480:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 00043490:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 000434a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 000434b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 000434c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 000434d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 000434e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 000434f0:·2223·6964·6d38·3432·3922·2074·6162·696e··"#idm8429"·tabin | |||
| 00043500:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00043510:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043520:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043530:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043540:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00043550:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 00043560:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00043570:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00043580:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00043590:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000435a0:·6d38·3432·3922·3e3c·7461·626c·6520·636c··m8429"><table·cl | |||
| 000435b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000435c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000435d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000435e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000435f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00043600:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00043610:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00043620:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00043630:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00043640:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00043650:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00043660:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00043670:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00043680:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00043690:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 000436a0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 000436b0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 000436c0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 000436d0:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 000436e0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 000436f0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 00043700:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 00043710:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 00043720:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 00043730:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 00043740:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 00043750:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 00043760:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 00043770:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 00043780:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 00043790:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 000437a0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 000437b0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 000437c0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 000437d0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 000437e0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 000437f0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00043800:·3433·3022·2074·6162·696e·6465·783d·2230··430"·tabindex="0 | |||
| 00043810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00043820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00043830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00043840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00043850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00043860:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 00043 | 00043360:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00043 | 00043370:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00043 | 00043380:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00043 | 00043390:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | ||
| 000433a0:·3238·223e·3c70·7265·3e3c·636f·6465·3e0a··28"><pre><code>. | |||
| 000433b0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 000433c0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 000433d0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 000438b0:·3330·223e·3c74·6162·6c65·2063·6c61·7373··30"><table·class | |||
| 000438c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 000438d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000438e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 000438f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00043900:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00043910:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00043920:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00043930:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00043940:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00043950:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00043960:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| Max diff block lines reached; 2315058/2347404 bytes (98.62%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:9 | 65 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 66 | ····*·cpe:/o:centos:centos:9 | 66 | ····*·cpe:/o:centos:centos:9 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 576, 21 lines modified | Offset 576, 19 lines modified | ||
| 576 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 576 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 577 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 577 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 578 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 578 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 579 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 579 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 580 | ············_\x8c_\x8i_\x8s············6.1.1 | 580 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 581 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 581 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 582 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 582 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 588 | package | 584 | [[packages]] |
| 585 | name·=·"aide" | ||
| 586 | version·=·"*" | ||
| 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 594 | #·Remediation·is·applicable·only·in·certain·platforms | 592 | #·Remediation·is·applicable·only·in·certain·platforms |
| 595 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 593 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 620, 38 lines modified | Offset 618, 40 lines modified | ||
| 620 | ··-·PCI-DSSv4-11.5.2 | 618 | ··-·PCI-DSSv4-11.5.2 |
| 621 | ··-·enable_strategy | 619 | ··-·enable_strategy |
| 622 | ··-·low_complexity | 620 | ··-·low_complexity |
| 623 | ··-·low_disruption | 621 | ··-·low_disruption |
| 624 | ··-·medium_severity | 622 | ··-·medium_severity |
| 625 | ··-·no_reboot_needed | 623 | ··-·no_reboot_needed |
| 626 | ··-·package_aide_installed | 624 | ··-·package_aide_installed |
| 627 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 628 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 629 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 630 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 631 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 632 | package·--add=aide | ||
| 633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 634 | [[packages]] | ||
| 635 | name·=·"aide" | ||
| 636 | version·=·"*" | ||
| 637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 638 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 639 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 640 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 641 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 642 | include·install_aide | 630 | include·install_aide |
| 643 | class·install_aide·{ | 631 | class·install_aide·{ |
| 644 | ··package·{·'aide': | 632 | ··package·{·'aide': |
| 645 | ····ensure·=>·'installed', | 633 | ····ensure·=>·'installed', |
| 646 | ··} | 634 | ··} |
| 647 | } | 635 | } |
| 636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 641 | package·install·aide | ||
| 642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 647 | package·--add=aide | ||
| 648 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 648 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 649 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 649 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 650 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. | 650 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. |
| 651 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 651 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 652 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 652 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 671, 14 lines modified | Offset 671, 18 lines modified | ||
| 671 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 671 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 672 | ············_\x8i_\x8s_\x8m······1446 | 672 | ············_\x8i_\x8s_\x8m······1446 |
| 673 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 673 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 674 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 674 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 675 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 675 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 676 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 676 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 679 | [customizations] | ||
| 680 | fips·=·true | ||
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 681 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 679 | #·Remediation·is·applicable·only·in·certain·platforms | 682 | #·Remediation·is·applicable·only·in·certain·platforms |
| 680 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 683 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 681 | var_system_crypto_policy='FIPS' | 684 | var_system_crypto_policy='FIPS' |
| Offset 805, 18 lines modified | Offset 809, 14 lines modified | ||
| 805 | ··-·NIST-800-53-SC-13 | 809 | ··-·NIST-800-53-SC-13 |
| 806 | ··-·enable_fips_mode | 810 | ··-·enable_fips_mode |
| 807 | ··-·high_severity | 811 | ··-·high_severity |
| 808 | ··-·medium_complexity | 812 | ··-·medium_complexity |
| 809 | ··-·medium_disruption | 813 | ··-·medium_disruption |
| 810 | ··-·reboot_required | 814 | ··-·reboot_required |
| 811 | ··-·restrict_strategy | 815 | ··-·restrict_strategy |
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 813 | [customizations] | ||
| 814 | fips·=·true | ||
| 815 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 816 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 816 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 817 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 817 | ····*·GnuTLS·library | 818 | ····*·GnuTLS·library |
| Max diff block lines reached; 210856/217907 bytes (96.76%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038560:·6173·206f·6620·3230·323 | 00038560:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15614, 348 lines modified | Offset 15614, 348 lines modified | ||
| 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003cfe0:·2369·646d·3839·3834·2220·7461·6269·6e64··#idm8984"·tabind | 0003cfe0:·2369·646d·3839·3834·2220·7461·6269·6e64··#idm8984"·tabind | ||
| 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003d040:·5265·6d65·6469·6174·696f·6e20· | 0003d040:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003d050:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003d060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003d070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003d080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003d090:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | |||
| 0003d0a0:·3422·3e3c·7072·653e·3c63·6f64·653e·0a5b··4"><pre><code>.[ | |||
| 0003d0b0:·6375·7374·6f6d·697a·6174·696f·6e73·5d0a··customizations]. | |||
| 0003d0c0:·6669·7073·203d·2074·7275·650a·3c2f·636f··fips·=·true.</co | |||
| 0003d0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d120:·646d·3839·3835·2220·7461·6269·6e64·6578··dm8985"·tabindex | |||
| 0003d130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d180:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003d | 0003d190:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003d | 0003d1a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003d | 0003d1b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003d | 0003d1c0:·6c61·7073·6522·2069·643d·2269·646d·3839··lapse"·id="idm89 | ||
| 0003d | 0003d1d0:·3835·223e·3c70·7265·3e3c·636f·6465·3e23··85"><pre><code># | ||
| 0003d | 0003d1e0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003d | 0003d1f0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003d | 0003d200:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003d | 0003d210:·6f72·6d73·0a69·6620·2820·5b20·2120·2d66··orms.if·(·[·!·-f | ||
| 0003d | 0003d220:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | ||
| 0003d230:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003d240:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003d250:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003d260:·2021·2028·205b·2022·247b·636f·6e74·6169···!·(·[·"${contai | |||
| 0003d270:·6e65·723a·2d7d·2220·3d3d·2022·6277·7261··ner:-}"·==·"bwra | |||
| 0003d280:·702d·6f73·6275·696c·6422·205d·2029·2029··p-osbuild"·]·)·) | |||
| 0003d | 0003d290:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 0003d2a0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003d100:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003d110:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003d120:·703b·2021·2028·205b·2022·247b·636f·6e74··p;·!·(·[·"${cont | |||
| 0003d130:·6169·6e65·723a·2d7d·2220·3d3d·2022·6277··ainer:-}"·==·"bw | |||
| 0003d140:·7261·702d·6f73·6275·696c·6422·205d·2029··rap-osbuild"·]·) | |||
| 0003d | 0003d2b0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 0003d160:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003d170:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003d | 0003d2c0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 0003d | 0003d2d0:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 0003d | 0003d2e0:·656e·0a0a·7661·725f·7379·7374·656d·5f63··en..var_system_c | ||
| 0003d | 0003d2f0:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | ||
| 0003d | 0003d300:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | ||
| 0003d | 0003d310:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | ||
| 0003d | 0003d320:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | ||
| 0003d | 0003d330:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 0003d | 0003d340:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | ||
| 0003d | 0003d350:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003d | 0003d360:·7922·3e46·4950·533a·4f53·5050·3c2f·6162··y">FIPS:OSPP</ab | ||
| 0003d | 0003d370:·6272·3e27·0a0a·0a66·6970·732d·6d6f·6465··br>'...fips-mode | ||
| 0003d | 0003d380:·2d73·6574·7570·202d·2d65·6e61·626c·650a··-setup·--enable. | ||
| 0003d | 0003d390:·0a73·7464·6572·725f·6f66·5f63·616c·6c3d··.stderr_of_call= | ||
| 0003d | 0003d3a0:·2428·7570·6461·7465·2d63·7279·7074·6f2d··$(update-crypto- | ||
| 0003d | 0003d3b0:·706f·6c69·6369·6573·202d·2d73·6574·2024··policies·--set·$ | ||
| 0003d | 0003d3c0:·7b76·6172·5f73·7973·7465·6d5f·6372·7970··{var_system_cryp | ||
| 0003d | 0003d3d0:·746f·5f70·6f6c·6963·797d·2032·2667·743b··to_policy}·2> | ||
| 0003d | 0003d3e0:·2661·6d70·3b31·2026·6774·3b20·2f64·6576··&1·>·/dev | ||
| 0003d | 0003d3f0:·2f6e·756c·6c29·0a72·633d·243f·0a0a·6966··/null).rc=$?..if | ||
| 0003d2c0:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003d2d0:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003d2e0:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003d2f0:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003d300:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003d310:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003d320:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003d330:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003d340:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003d350:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003d360:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003d370:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003d380:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003d390:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003d3a0:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003d3b0:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003d3c0:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003d3d0:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003d3e0:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003d3f0:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003d400:·2074·6573·7420·2224·7263·2220· | 0003d400:·2074·6573·7420·2224·7263·2220·3d20·3132···test·"$rc"·=·12 | ||
| 0003d410:·373b·2074·6865·6e0a·0965·6368·6f20·2224··7;·then..echo·"$ | |||
| 0003d420:·7374·6465·7272·5f6f·665f·6361·6c6c·2220··stderr_of_call"· | |||
| 0003d430:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003d440:·2022·4d61·6b65·2073·7572·6520·7468·6174···"Make·sure·that | |||
| 0003d450:·2074·6865·2073·6372·6970·7420·6973·2069···the·script·is·i | |||
| 0003d460:·6e73·7461·6c6c·6564·206f·6e20·7468·6520··nstalled·on·the· | |||
| 0003d470:·7265·6d65·6469·6174·6564·2073·7973·7465··remediated·syste | |||
| 0003d480:·6d2e·2220·2667·743b·2661·6d70·3b32·0a09··m."·>&2.. | |||
| 0003d490:·6563·686f·2022·5365·6520·6f75·7470·7574··echo·"See·output | |||
| 0003d4a0:·206f·6620·7468·6520·2764·6e66·2070·726f···of·the·'dnf·pro | |||
| 0003d4b0:·7669·6465·7320·7570·6461·7465·2d63·7279··vides·update-cry | |||
| 0003d4c0:·7074·6f2d·706f·6c69·6369·6573·2720·636f··pto-policies'·co | |||
| 0003d4d0:·6d6d·616e·6422·2026·6774·3b26·616d·703b··mmand"·>& | |||
| 0003d4e0:·320a·0965·6368·6f20·2274·6f20·7365·6520··2..echo·"to·see· | |||
| 0003d4f0:·7768·6174·2070·6163·6b61·6765·2074·6f20··what·package·to· | |||
| 0003d500:·2872·6529·696e·7374·616c·6c22·2026·6774··(re)install"·> | |||
| Max diff block lines reached; 2662091/2709893 bytes (98.24%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 210, 14 lines modified | Offset 210, 18 lines modified | ||
| 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 211 | ············_\x8i_\x8s_\x8m······1446 | 211 | ············_\x8i_\x8s_\x8m······1446 |
| 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 218 | [customizations] | ||
| 219 | fips·=·true | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 218 | #·Remediation·is·applicable·only·in·certain·platforms | 221 | #·Remediation·is·applicable·only·in·certain·platforms |
| 219 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 222 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 220 | var_system_crypto_policy='FIPS:OSPP' | 223 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 344, 18 lines modified | Offset 348, 14 lines modified | ||
| 344 | ··-·NIST-800-53-SC-13 | 348 | ··-·NIST-800-53-SC-13 |
| 345 | ··-·enable_fips_mode | 349 | ··-·enable_fips_mode |
| 346 | ··-·high_severity | 350 | ··-·high_severity |
| 347 | ··-·medium_complexity | 351 | ··-·medium_complexity |
| 348 | ··-·medium_disruption | 352 | ··-·medium_disruption |
| 349 | ··-·reboot_required | 353 | ··-·reboot_required |
| 350 | ··-·restrict_strategy | 354 | ··-·restrict_strategy |
| 351 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 352 | [customizations] | ||
| 353 | fips·=·true | ||
| 354 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 355 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 355 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 356 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 356 | ····*·GnuTLS·library | 357 | ····*·GnuTLS·library |
| 357 | ····*·OpenSSL·library | 358 | ····*·OpenSSL·library |
| 358 | ····*·NSS·library | 359 | ····*·NSS·library |
| 359 | ····*·OpenJDK | 360 | ····*·OpenJDK |
| 360 | ····*·Libkrb5 | 361 | ····*·Libkrb5 |
| Offset 367, 21 lines modified | Offset 367, 19 lines modified | ||
| 367 | $·sudo·dnf·install·crypto-policies | 367 | $·sudo·dnf·install·crypto-policies |
| 368 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 368 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 369 | Severity: ··medium | 369 | Severity: ··medium |
| 370 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 370 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 371 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 371 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 372 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 372 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 379 | package | 375 | [[packages]] |
| 376 | name·=·"crypto-policies" | ||
| 377 | version·=·"*" | ||
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 385 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 383 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 400, 38 lines modified | Offset 398, 40 lines modified | ||
| 400 | ··-·DISA-STIG-RHEL-09-672010 | 398 | ··-·DISA-STIG-RHEL-09-672010 |
| 401 | ··-·enable_strategy | 399 | ··-·enable_strategy |
| 402 | ··-·low_complexity | 400 | ··-·low_complexity |
| 403 | ··-·low_disruption | 401 | ··-·low_disruption |
| 404 | ··-·medium_severity | 402 | ··-·medium_severity |
| 405 | ··-·no_reboot_needed | 403 | ··-·no_reboot_needed |
| 406 | ··-·package_crypto-policies_installed | 404 | ··-·package_crypto-policies_installed |
| 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 408 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 409 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 410 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 411 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 412 | package·--add=crypto-policies | ||
| 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 414 | [[packages]] | ||
| 415 | name·=·"crypto-policies" | ||
| 416 | version·=·"*" | ||
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 408 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 409 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 422 | include·install_crypto-policies | 410 | include·install_crypto-policies |
| 423 | class·install_crypto-policies·{ | 411 | class·install_crypto-policies·{ |
| 424 | ··package·{·'crypto-policies': | 412 | ··package·{·'crypto-policies': |
| 425 | ····ensure·=>·'installed', | 413 | ····ensure·=>·'installed', |
| 426 | ··} | 414 | ··} |
| 427 | } | 415 | } |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 421 | package·install·crypto-policies | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 427 | package·--add=crypto-policies | ||
| 428 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 428 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 429 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 429 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 430 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 430 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| Max diff block lines reached; 354637/361732 bytes (98.04%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038550:·2020·2020·2028·6173·206f·6620·3230·323 | 00038550:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00038560:·2d3 | 00038560:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16533, 236 lines modified | Offset 16533, 236 lines modified | ||
| 00040940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 00040940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00040950:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 00040950:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 00040960:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00040960:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00040970:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00040970:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00040980:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00040980:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00040990:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00040990:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 000409a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 000409a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 000409b0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 000409c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 000409d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000409e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000409f0:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 00040a00:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00040a10:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00040a20:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00040a30:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00040a40:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00040a50:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040a60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040a70:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040a80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040a90:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00040aa0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00040ab0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00040ac0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00040ad0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00040ae0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00040af0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 00040b00:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 00040b10:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00040b20:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00040b30:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00040b40:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00040b50:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00040b60:·2369·646d·3834·3239·2220·7461·6269·6e64··#idm8429"·tabind | |||
| 00040b70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00040b80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00040b90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00040ba0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00040bb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00040 | 000409b0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 000409c0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 00040bd0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00040be0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040bf0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040c00:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040c10:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 00040c20:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040c30:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040c40:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040c50:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040c60:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040c70:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040c80:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040c90:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040ca0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040cb0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040cc0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040cd0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00040ce0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00040cf0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00040d00:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 00040d10:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 00040d20:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 00040d30:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 00040d40:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 00040d50:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 00040d60:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 00040d70:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 00040d80:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 00040d90:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 00040da0:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 00040db0:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 00040dc0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 00040dd0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 00040de0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 00040df0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 00040e00:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 00040e10:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 00040e20:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040e30:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040e40:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040e50:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040e60:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 00040e70:·3330·2220·7461·6269·6e64·6578·3d22·3022··30"·tabindex="0" | |||
| 00040e80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040e90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040ea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040eb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040ec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040ed0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00040 | 000409d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 00040 | 000409e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 00040 | 000409f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 00040 | 00040a00:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | ||
| 00040a10:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 00040a20:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 00040a30:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 00040a40:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00040f20:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 00040f30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040f40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040f50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040f60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040f70:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040f80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040f90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040fa0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040fb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040fc0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| Max diff block lines reached; 2503169/2535653 bytes (98.72%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 432, 21 lines modified | Offset 432, 19 lines modified | ||
| 432 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 432 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 433 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 433 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 435 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 435 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 436 | ············_\x8c_\x8i_\x8s············6.1.1 | 436 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 444 | package | 440 | [[packages]] |
| 441 | name·=·"aide" | ||
| 442 | version·=·"*" | ||
| 445 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 446 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 447 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 448 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 449 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 450 | #·Remediation·is·applicable·only·in·certain·platforms | 448 | #·Remediation·is·applicable·only·in·certain·platforms |
| 451 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 449 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 476, 38 lines modified | Offset 474, 40 lines modified | ||
| 476 | ··-·PCI-DSSv4-11.5.2 | 474 | ··-·PCI-DSSv4-11.5.2 |
| 477 | ··-·enable_strategy | 475 | ··-·enable_strategy |
| 478 | ··-·low_complexity | 476 | ··-·low_complexity |
| 479 | ··-·low_disruption | 477 | ··-·low_disruption |
| 480 | ··-·medium_severity | 478 | ··-·medium_severity |
| 481 | ··-·no_reboot_needed | 479 | ··-·no_reboot_needed |
| 482 | ··-·package_aide_installed | 480 | ··-·package_aide_installed |
| 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 488 | package·--add=aide | ||
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 490 | [[packages]] | ||
| 491 | name·=·"aide" | ||
| 492 | version·=·"*" | ||
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 498 | include·install_aide | 486 | include·install_aide |
| 499 | class·install_aide·{ | 487 | class·install_aide·{ |
| 500 | ··package·{·'aide': | 488 | ··package·{·'aide': |
| 501 | ····ensure·=>·'installed', | 489 | ····ensure·=>·'installed', |
| 502 | ··} | 490 | ··} |
| 503 | } | 491 | } |
| 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 497 | package·install·aide | ||
| 498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 503 | package·--add=aide | ||
| 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 505 | Run·the·following·command·to·generate·a·new·database: | 505 | Run·the·following·command·to·generate·a·new·database: |
| 506 | $·sudo·/usr/sbin/aide·--init | 506 | $·sudo·/usr/sbin/aide·--init |
| 507 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 507 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 508 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 508 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 509 | To·initiate·a·manual·check,·run·the·following·command: | 509 | To·initiate·a·manual·check,·run·the·following·command: |
| 510 | $·sudo·/usr/sbin/aide·--check | 510 | $·sudo·/usr/sbin/aide·--check |
| Offset 825, 39 lines modified | Offset 825, 14 lines modified | ||
| 825 | » echo·"to·see·what·package·to·(re)install"·>&2 | 825 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 826 | » false··#·end·with·an·error·code | 826 | » false··#·end·with·an·error·code |
| 827 | elif·test·"$rc"·!=·0;·then | 827 | elif·test·"$rc"·!=·0;·then |
| 828 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 828 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 829 | » false··#·end·with·an·error·code | 829 | » false··#·end·with·an·error·code |
| 830 | fi | 830 | fi |
| 831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 836 | --- | ||
| 837 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 838 | kind:·MachineConfig | ||
| 839 | spec: | ||
| 840 | ··config: | ||
| 841 | ····ignition: | ||
| 842 | ······version:·3.1.0 | ||
| 843 | ····systemd: | ||
| 844 | ······units: | ||
| 845 | ········-·name:·configure-crypto-policy.service | ||
| 846 | ··········enabled:·true | ||
| 847 | ··········contents:·| | ||
| 848 | ············[Unit] | ||
| 849 | ············Before=kubelet.service | ||
| 850 | ············[Service] | ||
| 851 | ············Type=oneshot | ||
| 852 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 853 | ············RemainAfterExit=yes | ||
| 854 | ············[Install] | ||
| 855 | ············WantedBy=multi-user.target | ||
| 856 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 228569/234269 bytes (97.57%) of diff not shown. | |||
| Offset 14425, 15 lines modified | Offset 14425, 15 lines modified | ||
| 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385f0:·3230·323 | 000385f0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15227, 236 lines modified | Offset 15227, 236 lines modified | ||
| 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b810:·5265·6d65·6469·6174·696f·6e20· | 0003b810:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b820:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b830:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b820:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b830:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b840:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b850:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b860:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b870:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b880:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b890:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b8a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b8b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b8c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b8d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b8e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b8f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b900:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b910:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b920:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b930:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b940:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b950:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b960:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b970:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b | 0003b840:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b850:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b860:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b990:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b9a0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b9b0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b9c0:·2369·646d·3834·3239·2220·7461·6269·6e64··#idm8429"·tabind | |||
| 0003b9d0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b9e0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b9f0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ba00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ba10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ba20:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003ba30:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003ba40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ba50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ba60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ba70:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 0003ba80:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ba90:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003baa0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bab0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bac0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bad0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bae0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003baf0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bb00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bb10:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bb20:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bb30:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bb40:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bb50:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b870:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | ||
| 0003b880:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b890:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b8a0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003bb70:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003bb80:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003bb90:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003bba0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003bbb0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003bbc0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003bbd0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003bbe0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003bbf0:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003bc00:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003bc10:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003bc20:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003bc30:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003bc40:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003bc50:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003bc60:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003bc70:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b | 0003b8b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b8c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b8d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b8e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b8f0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b900:·3239·2220·7461·6269·6e64·6578·3d22·3022··29"·tabindex="0" | |||
| 0003b910:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b920:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b930:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b940:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b950:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b960:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b970:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b980:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b990:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b9a0:·6522·2069·643d·2269·646d·3834·3239·223e··e"·id="idm8429"> | |||
| 0003b9b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b9c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b9d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b9e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b9f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ba00:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ba10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba20:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ba30:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba40:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| Max diff block lines reached; 4237959/4270305 bytes (99.24%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 |
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 63 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 63 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 65 | ····*·cpe:/o:centos:centos:9 | 65 | ····*·cpe:/o:centos:centos:9 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 125, 21 lines modified | Offset 125, 19 lines modified | ||
| 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8c_\x8i_\x8s············6.1.1 | 129 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package | 133 | [[packages]] |
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 38 lines modified | Offset 167, 40 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 169 | ··-·low_complexity |
| 172 | ··-·low_disruption | 170 | ··-·low_disruption |
| 173 | ··-·medium_severity | 171 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | [[packages]] | ||
| 184 | name·=·"aide" | ||
| 185 | version·=·"*" | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | include·install_aide | 179 | include·install_aide |
| 192 | class·install_aide·{ | 180 | class·install_aide·{ |
| 193 | ··package·{·'aide': | 181 | ··package·{·'aide': |
| 194 | ····ensure·=>·'installed', | 182 | ····ensure·=>·'installed', |
| 195 | ··} | 183 | ··} |
| 196 | } | 184 | } |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·install·aide | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=aide | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 202 | To·initiate·a·manual·check,·run·the·following·command: | 202 | To·initiate·a·manual·check,·run·the·following·command: |
| 203 | $·sudo·/usr/sbin/aide·--check | 203 | $·sudo·/usr/sbin/aide·--check |
| Offset 1921, 14 lines modified | Offset 1921, 18 lines modified | ||
| 1921 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1921 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1922 | ············_\x8i_\x8s_\x8m······1446 | 1922 | ············_\x8i_\x8s_\x8m······1446 |
| 1923 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1923 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1924 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1924 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1925 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1925 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1926 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1926 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1927 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 1927 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1929 | [customizations] | ||
| 1930 | fips·=·true | ||
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1931 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1929 | #·Remediation·is·applicable·only·in·certain·platforms | 1932 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1930 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1933 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1931 | var_system_crypto_policy='FIPS' | 1934 | var_system_crypto_policy='FIPS' |
| Offset 2055, 18 lines modified | Offset 2059, 14 lines modified | ||
| 2055 | ··-·NIST-800-53-SC-13 | 2059 | ··-·NIST-800-53-SC-13 |
| 2056 | ··-·enable_fips_mode | 2060 | ··-·enable_fips_mode |
| 2057 | ··-·high_severity | 2061 | ··-·high_severity |
| 2058 | ··-·medium_complexity | 2062 | ··-·medium_complexity |
| 2059 | ··-·medium_disruption | 2063 | ··-·medium_disruption |
| 2060 | ··-·reboot_required | 2064 | ··-·reboot_required |
| 2061 | ··-·restrict_strategy | 2065 | ··-·restrict_strategy |
| 2062 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2063 | [customizations] | ||
| 2064 | fips·=·true | ||
| 2065 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2066 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 2066 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 2067 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 2067 | fips-mode-setup·--enable | 2068 | fips-mode-setup·--enable |
| Max diff block lines reached; 476004/482549 bytes (98.64%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038760:·2020·2020·2028·6173·206f·6620·3230·323 | 00038760:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00038770:·2d3 | 00038770:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15246, 235 lines modified | Offset 15246, 235 lines modified | ||
| 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | ||
| 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b940:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b950:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b940:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b950:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b960:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b970:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b980:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b990:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b9a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b9b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b9c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b9d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b9e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b9f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ba00:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ba10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ba30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ba40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ba50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ba60:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ba70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ba80:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003ba90:·6c20·6169·6465·0a3c·2f63·6f64·653e·3c2f··l·aide.</code></ | |||
| 0003baa0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bab0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bac0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bad0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bae0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | |||
| 0003baf0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003bb00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bb10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bb20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bb30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bb40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bb50:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bb60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bb70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bb80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bb90:·2220·6964·3d22·6964·6d38·3432·3922·3e3c··"·id="idm8429">< | |||
| 0003bba0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bbb0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bbc0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bbd0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bbe0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bbf0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bc00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bc10:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bc20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bc30:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bc40:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bc50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bc60:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bc70:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bc80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bc90:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003bca0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003bcb0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003bcc0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003bcd0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003bce0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003bcf0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003bd00:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003bd10:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003bd20:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003bd30:·7468·656e·0a20·2020·2064·6e66·2069·6e73··then.····dnf·ins | |||
| 0003bd40:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003bd50:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003bd60:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003bd70:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003bd80:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003bd90:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003bda0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bdb0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bdc0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bdd0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bde0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bdf0:·743d·2223·6964·6d38·3433·3022·2074·6162··t="#idm8430"·tab | |||
| 0003be00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003be10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003be20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003be30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003be40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003be50:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003be60:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b | 0003b960:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b970:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b980:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b990:·643d·2269·646d·3834·3238·223e·3c70·7265··d="idm8428"><pre | ||
| 0003b9a0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b9b0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b9c0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003beb0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bec0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bed0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bee0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bef0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bf00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bf10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bf20:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bf30:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bf40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bf50:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| Max diff block lines reached; 4188562/4220908 bytes (99.23%) of diff not shown. | |||
| Offset 67, 15 lines modified | Offset 67, 15 lines modified | ||
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 |
| 68 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 68 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 69 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 69 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 70 | ····*·cpe:/o:redhat:enterprise_linux:9 | 70 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 71 | ····*·cpe:/o:centos:centos:9 | 71 | ····*·cpe:/o:centos:centos:9 |
| 72 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 73 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 73 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 74 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 74 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 75 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 76 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 77 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 78 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 78 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 79 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 80 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 81 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 81 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 130, 21 lines modified | Offset 130, 19 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············6.1.1 | 134 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package | 138 | [[packages]] |
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 174, 38 lines modified | Offset 172, 40 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 174 | ··-·low_complexity |
| 177 | ··-·low_disruption | 175 | ··-·low_disruption |
| 178 | ··-·medium_severity | 176 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | [[packages]] | ||
| 189 | name·=·"aide" | ||
| 190 | version·=·"*" | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | include·install_aide | 184 | include·install_aide |
| 197 | class·install_aide·{ | 185 | class·install_aide·{ |
| 198 | ··package·{·'aide': | 186 | ··package·{·'aide': |
| 199 | ····ensure·=>·'installed', | 187 | ····ensure·=>·'installed', |
| 200 | ··} | 188 | ··} |
| 201 | } | 189 | } |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·install·aide | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 201 | package·--add=aide | ||
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 203 | Run·the·following·command·to·generate·a·new·database: | 203 | Run·the·following·command·to·generate·a·new·database: |
| 204 | $·sudo·/usr/sbin/aide·--init | 204 | $·sudo·/usr/sbin/aide·--init |
| 205 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 205 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 206 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 206 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 207 | To·initiate·a·manual·check,·run·the·following·command: | 207 | To·initiate·a·manual·check,·run·the·following·command: |
| 208 | $·sudo·/usr/sbin/aide·--check | 208 | $·sudo·/usr/sbin/aide·--check |
| Offset 1926, 14 lines modified | Offset 1926, 18 lines modified | ||
| 1926 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1926 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1927 | ············_\x8i_\x8s_\x8m······1446 | 1927 | ············_\x8i_\x8s_\x8m······1446 |
| 1928 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1928 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1929 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1929 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1930 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1930 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1931 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1931 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1932 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 1932 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1934 | [customizations] | ||
| 1935 | fips·=·true | ||
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1934 | #·Remediation·is·applicable·only·in·certain·platforms | 1937 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1935 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1938 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1936 | var_system_crypto_policy='FIPS' | 1939 | var_system_crypto_policy='FIPS' |
| Offset 2060, 18 lines modified | Offset 2064, 14 lines modified | ||
| 2060 | ··-·NIST-800-53-SC-13 | 2064 | ··-·NIST-800-53-SC-13 |
| 2061 | ··-·enable_fips_mode | 2065 | ··-·enable_fips_mode |
| 2062 | ··-·high_severity | 2066 | ··-·high_severity |
| 2063 | ··-·medium_complexity | 2067 | ··-·medium_complexity |
| 2064 | ··-·medium_disruption | 2068 | ··-·medium_disruption |
| 2065 | ··-·reboot_required | 2069 | ··-·reboot_required |
| 2066 | ··-·restrict_strategy | 2070 | ··-·restrict_strategy |
| 2067 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2068 | [customizations] | ||
| 2069 | fips·=·true | ||
| 2070 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2071 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 2071 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 2072 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 2072 | fips-mode-setup·--enable | 2073 | fips-mode-setup·--enable |
| Max diff block lines reached; 469807/476365 bytes (98.62%) of diff not shown. | |||
| Offset 14354, 15 lines modified | Offset 14354, 15 lines modified | ||
| 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038180:·7320·6f66·2032·3032·3 | 00038180:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15462, 176 lines modified | Offset 15462, 176 lines modified | ||
| 0003c650:·6765·743d·2223·6964·6d32·3533·3422·2074··get="#idm2534"·t | 0003c650:·6765·743d·2223·6964·6d32·3533·3422·2074··get="#idm2534"·t | ||
| 0003c660:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003c660:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c670:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c670:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c680:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c680:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c690:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c690:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c6a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c6a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c6b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c6b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c6c0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c6d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c6e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c6f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c700:·2069·643d·2269·646d·3235·3334·223e·3c74···id="idm2534"><t | |||
| 0003c710:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c720:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c730:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c740:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c750:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c6c0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0003c6d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c6e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c6f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c700:·7365·2220·6964·3d22·6964·6d32·3533·3422··se"·id="idm2534" | |||
| 0003c710:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c720:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c730:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c740:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c750:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c760:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c770:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c780:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c7 | 0003c760:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003c7 | 0003c770:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c7 | 0003c780:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003c790:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c7a0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c7b0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c7c0:· | 0003c7c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c7d0:· | 0003c7d0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003c7e0:· | 0003c7e0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003c7f0:· | 0003c7f0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003c800:·7072·653e·3c63·6f64·653e·2d2d·2d0a·6170··pre><code>---.ap | |||
| 0003c810:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 0003c820:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 0003c830:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 0003c840:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 0003c850:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 0003c860:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| 0003c870:·0a20·2020·2020·2076·6572·7369·6f6e·3a20··.······version:· | |||
| 0003c880:·332e·312e·300a·2020·2020·7379·7374·656d··3.1.0.····system | |||
| 0003c890:·643a·0a20·2020·2020·2075·6e69·7473·3a0a··d:.······units:. | |||
| 0003c8a0:·2020·2020·2020·2020·2d20·6e61·6d65·3a20··········-·name:· | |||
| 0003c8b0:·636f·6e66·6967·7572·652d·6372·7970·746f··configure-crypto | |||
| 0003c8c0:·2d70·6f6c·6963·792e·7365·7276·6963·650a··-policy.service. | |||
| 0003c8d0:·2020·2020·2020·2020·2020·656e·6162·6c65············enable | |||
| 0003c8e0:·643a·2074·7275·650a·2020·2020·2020·2020··d:·true.········ | |||
| 0003c8f0:·2020·636f·6e74·656e·7473·3a20·7c0a·2020····contents:·|.·· | |||
| 0003c900:·2020·2020·2020·2020·2020·5b55·6e69·745d············[Unit] | |||
| 0003c910:·0a20·2020·2020·2020·2020·2020·2042·6566··.············Bef | |||
| 0003c920:·6f72·653d·6b75·6265·6c65·742e·7365·7276··ore=kubelet.serv | |||
| 0003c930:·6963·650a·2020·2020·2020·2020·2020·2020··ice.············ | |||
| 0003c940:·5b53·6572·7669·6365·5d0a·2020·2020·2020··[Service].······ | |||
| 0003c950:·2020·2020·2020·5479·7065·3d6f·6e65·7368········Type=onesh | |||
| 0003c960:·6f74·0a20·2020·2020·2020·2020·2020·2045··ot.············E | |||
| 0003c970:·7865·6353·7461·7274·3d75·7064·6174·652d··xecStart=update- | |||
| 0003c980:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 0003c990:·2d2d·7365·7420·7b7b·2e76·6172·5f73·7973··--set·{{.var_sys | |||
| 0003c9a0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003c9b0:·797d·7d0a·2020·2020·2020·2020·2020·2020··y}}.············ | |||
| 0003c9c0:·5265·6d61·696e·4166·7465·7245·7869·743d··RemainAfterExit= | |||
| 0003c9d0:·7965·730a·2020·2020·2020·2020·2020·2020··yes.············ | |||
| 0003c9e0:·5b49·6e73·7461·6c6c·5d0a·2020·2020·2020··[Install].······ | |||
| 0003c9f0:·2020·2020·2020·5761·6e74·6564·4279·3d6d········WantedBy=m | |||
| 0003ca00:·756c·7469·2d75·7365·722e·7461·7267·6574··ulti-user.target | |||
| 0003ca10:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ca20:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ca30:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ca40:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ca50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ca60:·743d·2223·6964·6d32·3533·3522·2074·6162··t="#idm2535"·tab | |||
| 0003ca70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ca80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ca90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003caa0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003cab0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003cac0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003cad0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003cae0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003caf0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003cb00:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003cb10:·643d·2269·646d·3235·3335·223e·3c74·6162··d="idm2535"><tab | |||
| 0003cb20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003cb30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003cb40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003cb50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003cb60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003cb70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003cb80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003cb90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003cba0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003cbb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003cbc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003cbd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003cbe0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003cbf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003cc00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c | 0003c800:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003c | 0003c810:·5843·4344·4620·5661·6c75·6520·7661·725f··XCCDF·Value·var_ | ||
| 0003c | 0003c820:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003c | 0003c830:·6c69·6379·2023·2070·726f·6d6f·7465·2074··licy·#·promote·t | ||
| 0003c | 0003c840:·6f20·7661·7269·6162·6c65·0a20·2073·6574··o·variable.··set | ||
| 0003c | 0003c850:·5f66·6163·743a·0a20·2020·2076·6172·5f73··_fact:.····var_s | ||
| Max diff block lines reached; 3153519/3177585 bytes (99.24%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 152, 39 lines modified | Offset 152, 14 lines modified | ||
| 152 | » echo·"to·see·what·package·to·(re)install"·>&2 | 152 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 153 | » false··#·end·with·an·error·code | 153 | » false··#·end·with·an·error·code |
| 154 | elif·test·"$rc"·!=·0;·then | 154 | elif·test·"$rc"·!=·0;·then |
| 155 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 155 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 156 | » false··#·end·with·an·error·code | 156 | » false··#·end·with·an·error·code |
| 157 | fi | 157 | fi |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 163 | --- | ||
| 164 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 165 | kind:·MachineConfig | ||
| 166 | spec: | ||
| 167 | ··config: | ||
| 168 | ····ignition: | ||
| 169 | ······version:·3.1.0 | ||
| 170 | ····systemd: | ||
| 171 | ······units: | ||
| 172 | ········-·name:·configure-crypto-policy.service | ||
| 173 | ··········enabled:·true | ||
| 174 | ··········contents:·| | ||
| 175 | ············[Unit] | ||
| 176 | ············Before=kubelet.service | ||
| 177 | ············[Service] | ||
| 178 | ············Type=oneshot | ||
| 179 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 180 | ············RemainAfterExit=yes | ||
| 181 | ············[Install] | ||
| 182 | ············WantedBy=multi-user.target | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 188 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 163 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 189 | ··set_fact: | 164 | ··set_fact: |
| Offset 227, 14 lines modified | Offset 202, 39 lines modified | ||
| 227 | ··-·PCI-DSSv4-2.2.7 | 202 | ··-·PCI-DSSv4-2.2.7 |
| 228 | ··-·configure_crypto_policy | 203 | ··-·configure_crypto_policy |
| 229 | ··-·high_severity | 204 | ··-·high_severity |
| 230 | ··-·low_complexity | 205 | ··-·low_complexity |
| 231 | ··-·low_disruption | 206 | ··-·low_disruption |
| 232 | ··-·no_reboot_needed | 207 | ··-·no_reboot_needed |
| 233 | ··-·restrict_strategy | 208 | ··-·restrict_strategy |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 214 | --- | ||
| 215 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 216 | kind:·MachineConfig | ||
| 217 | spec: | ||
| 218 | ··config: | ||
| 219 | ····ignition: | ||
| 220 | ······version:·3.1.0 | ||
| 221 | ····systemd: | ||
| 222 | ······units: | ||
| 223 | ········-·name:·configure-crypto-policy.service | ||
| 224 | ··········enabled:·true | ||
| 225 | ··········contents:·| | ||
| 226 | ············[Unit] | ||
| 227 | ············Before=kubelet.service | ||
| 228 | ············[Service] | ||
| 229 | ············Type=oneshot | ||
| 230 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 231 | ············RemainAfterExit=yes | ||
| 232 | ············[Install] | ||
| 233 | ············WantedBy=multi-user.target | ||
| 234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 235 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 | 235 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 |
| 236 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. | 236 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 237 | Severity: ··medium | 237 | Severity: ··medium |
| 238 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy | 238 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy |
| 239 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 | 239 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 |
| 240 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) | 240 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) |
| Offset 774, 21 lines modified | Offset 774, 19 lines modified | ||
| 774 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 774 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 775 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 775 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 776 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 776 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 777 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 777 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 778 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 778 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 779 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 779 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 780 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 780 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 781 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 781 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 782 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 783 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 784 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 785 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 786 | package | 782 | [[packages]] |
| 783 | name·=·"sudo" | ||
| 784 | version·=·"*" | ||
| 787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 785 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 788 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 786 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 789 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 787 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 790 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 788 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 791 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 789 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 792 | #·Remediation·is·applicable·only·in·certain·platforms | 790 | #·Remediation·is·applicable·only·in·certain·platforms |
| 793 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 791 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 815, 38 lines modified | Offset 813, 40 lines modified | ||
| 815 | ··-·PCI-DSSv4-2.2.6 | 813 | ··-·PCI-DSSv4-2.2.6 |
| 816 | ··-·enable_strategy | 814 | ··-·enable_strategy |
| 817 | ··-·low_complexity | 815 | ··-·low_complexity |
| 818 | ··-·low_disruption | 816 | ··-·low_disruption |
| 819 | ··-·medium_severity | 817 | ··-·medium_severity |
| 820 | ··-·no_reboot_needed | 818 | ··-·no_reboot_needed |
| Max diff block lines reached; 298774/304429 bytes (98.14%) of diff not shown. | |||
| Offset 14376, 16 lines modified | Offset 14376, 16 lines modified | ||
| 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000382e0:·2020·2020·2028·6173·206f·6620·3230·323 | 000382e0:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 000382f0:·2d3 | 000382f0:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15900, 340 lines modified | Offset 15900, 340 lines modified | ||
| 0003e1b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003e1b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003e1c0:·646d·3233·3733·2220·7461·6269·6e64·6578··dm2373"·tabindex | 0003e1c0:·646d·3233·3733·2220·7461·6269·6e64·6578··dm2373"·tabindex | ||
| 0003e1d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003e1d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003e1e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003e1e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003e1f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003e1f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003e200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003e200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003e210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003e210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003e220:·6d65·6469·6174·696f·6e20· | 0003e220:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003e230:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003e240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003e250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e270:·7365·2220·6964·3d22·6964·6d32·3337·3322··se"·id="idm2373" | |||
| 0003e280:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 0003e290:·7374·6f6d·697a·6174·696f·6e73·5d0a·6669··stomizations].fi | |||
| 0003e2a0:·7073·203d·2074·7275·650a·3c2f·636f·6465··ps·=·true.</code | |||
| 0003e230:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003e240:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003e250:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003e260:·6c61·7073·6522·2069·643d·2269·646d·3233··lapse"·id="idm23 | |||
| 0003e270:·3733·223e·3c70·7265·3e3c·636f·6465·3e23··73"><pre><code># | |||
| 0003e280:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003e290:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003e2a0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003e2b0:·6f72·6d73·0a69·6620·2820·5b20·2120·2d66··orms.if·(·[·!·-f | |||
| 0003e2c0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003e2d0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003e2e0:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003e2f0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003e300:·2021·2028·205b·2022·247b·636f·6e74·6169···!·(·[·"${contai | |||
| 0003e310:·6e65·723a·2d7d·2220·3d3d·2022·6277·7261··ner:-}"·==·"bwra | |||
| 0003e320:·702d·6f73·6275·696c·6422·205d·2029·2029··p-osbuild"·]·)·) | |||
| 0003e330:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | |||
| 0003e340:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003e350:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003e360:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003e370:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | |||
| 0003e380:·656e·0a0a·7661·725f·7379·7374·656d·5f63··en..var_system_c | |||
| 0003e390:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | |||
| 0003e3a0:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | |||
| 0003e3b0:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | |||
| 0003e3c0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003e3d0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003e3e0:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 0003e3f0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003e400:·7922·3e46·4950·533c·2f61·6262·723e·270a··y">FIPS</abbr>'. | |||
| 0003e410:·0a0a·6669·7073·2d6d·6f64·652d·7365·7475··..fips-mode-setu | |||
| 0003e420:·7020·2d2d·656e·6162·6c65·0a0a·7374·6465··p·--enable..stde | |||
| 0003e430:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | |||
| 0003e440:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 0003e450:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | |||
| 0003e460:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003e470:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | |||
| 0003e480:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | |||
| 0003e490:·290a·7263·3d24·3f0a·0a69·6620·7465·7374··).rc=$?..if·test | |||
| 0003e4a0:·2022·2472·6322·203d·2031·3237·3b20·7468···"$rc"·=·127;·th | |||
| 0003e4b0:·656e·0a09·6563·686f·2022·2473·7464·6572··en..echo·"$stder | |||
| 0003e4c0:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003e4d0:·616d·703b·320a·0965·6368·6f20·224d·616b··amp;2..echo·"Mak | |||
| 0003e4e0:·6520·7375·7265·2074·6861·7420·7468·6520··e·sure·that·the· | |||
| 0003e4f0:·7363·7269·7074·2069·7320·696e·7374·616c··script·is·instal | |||
| 0003e500:·6c65·6420·6f6e·2074·6865·2072·656d·6564··led·on·the·remed | |||
| 0003e510:·6961·7465·6420·7379·7374·656d·2e22·2026··iated·system."·& | |||
| 0003e520:·6774·3b26·616d·703b·320a·0965·6368·6f20··gt;&2..echo· | |||
| 0003e530:·2253·6565·206f·7574·7075·7420·6f66·2074··"See·output·of·t | |||
| 0003e540:·6865·2027·646e·6620·7072·6f76·6964·6573··he·'dnf·provides | |||
| 0003e550:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 0003e560:·6f6c·6963·6965·7327·2063·6f6d·6d61·6e64··olicies'·command | |||
| 0003e570:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003e580:·686f·2022·746f·2073·6565·2077·6861·7420··ho·"to·see·what· | |||
| 0003e590:·7061·636b·6167·6520·746f·2028·7265·2969··package·to·(re)i | |||
| 0003e5a0:·6e73·7461·6c6c·2220·2667·743b·2661·6d70··nstall"·>& | |||
| 0003e5b0:·3b32·0a0a·0966·616c·7365·2020·2320·656e··;2...false··#·en | |||
| 0003e5c0:·6420·7769·7468·2061·6e20·6572·726f·7220··d·with·an·error· | |||
| 0003e5d0:·636f·6465·0a65·6c69·6620·7465·7374·2022··code.elif·test·" | |||
| 0003e5e0:·2472·6322·2021·3d20·303b·2074·6865·6e0a··$rc"·!=·0;·then. | |||
| 0003e5f0:·0965·6368·6f20·2245·7272·6f72·2069·6e76··.echo·"Error·inv | |||
| 0003e600:·6f6b·696e·6720·7468·6520·7570·6461·7465··oking·the·update | |||
| 0003e610:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003e620:·2073·6372·6970·743a·2024·7374·6465·7272···script:·$stderr | |||
| 0003e630:·5f6f·665f·6361·6c6c·2220·2667·743b·2661··_of_call"·>&a | |||
| 0003e640:·6d70·3b32·0a09·6661·6c73·6520·2023·2065··mp;2..false··#·e | |||
| 0003e650:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003e660:·2063·6f64·650a·6669·0a0a·656c·7365·0a20···code.fi..else.· | |||
| 0003e670:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003e680:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003e690:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003e6a0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003e6b0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003e | 0003e2b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003e | 0003e2c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003e | 0003e2d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003e | 0003e2e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003e | 0003e2f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003e | 0003e300:·3233·3734·2220·7461·6269·6e64·6578·3d22··2374"·tabindex=" | ||
| 0003e | 0003e310:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003e | 0003e320:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003e | 0003e330:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003e | 0003e340:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003e | 0003e350:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003e360:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003e370:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003e380:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003e390:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003e3a0:·7073·6522·2069·643d·2269·646d·3233·3734··pse"·id="idm2374 | |||
| 0003e3b0:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003e3c0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003e3d0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003e3e0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003e3f0:·6d73·0a69·6620·2820·5b20·2120·2d66·202f··ms.if·(·[·!·-f·/ | |||
| Max diff block lines reached; 1662213/1709049 bytes (97.26%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | ····*·cpe:/o:fedoraproject:fedora:41 | 49 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 50 | ····*·cpe:/o:fedoraproject:fedora:42 | 50 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 51 | ····*·cpe:/o:fedoraproject:fedora:43 | 51 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 52 | ····*·cpe:/o:fedoraproject:fedora:44 | 52 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 53 | ····*·cpe:/o:fedoraproject:fedora:45 | 53 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 286, 14 lines modified | Offset 286, 18 lines modified | ||
| 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 294 | [customizations] | ||
| 295 | fips·=·true | ||
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 294 | #·Remediation·is·applicable·only·in·certain·platforms | 297 | #·Remediation·is·applicable·only·in·certain·platforms |
| 295 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 298 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 296 | var_system_crypto_policy='FIPS' | 299 | var_system_crypto_policy='FIPS' |
| Offset 416, 18 lines modified | Offset 420, 14 lines modified | ||
| 416 | ··-·NIST-800-53-SC-13 | 420 | ··-·NIST-800-53-SC-13 |
| 417 | ··-·enable_fips_mode | 421 | ··-·enable_fips_mode |
| 418 | ··-·high_severity | 422 | ··-·high_severity |
| 419 | ··-·medium_complexity | 423 | ··-·medium_complexity |
| 420 | ··-·medium_disruption | 424 | ··-·medium_disruption |
| 421 | ··-·reboot_required | 425 | ··-·reboot_required |
| 422 | ··-·restrict_strategy | 426 | ··-·restrict_strategy |
| 423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 424 | [customizations] | ||
| 425 | fips·=·true | ||
| 426 | Group ·System·Cryptographic·Policies· Group·contains·6·rules | 427 | Group ·System·Cryptographic·Policies· Group·contains·6·rules |
| 427 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 428 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 428 | ····*·GnuTLS·library | 429 | ····*·GnuTLS·library |
| 429 | ····*·OpenSSL·library | 430 | ····*·OpenSSL·library |
| 430 | ····*·NSS·library | 431 | ····*·NSS·library |
| 431 | ····*·OpenJDK | 432 | ····*·OpenJDK |
| 432 | ····*·Libkrb5 | 433 | ····*·Libkrb5 |
| Offset 493, 39 lines modified | Offset 493, 14 lines modified | ||
| 493 | » echo·"to·see·what·package·to·(re)install"·>&2 | 493 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 494 | » false··#·end·with·an·error·code | 494 | » false··#·end·with·an·error·code |
| 495 | elif·test·"$rc"·!=·0;·then | 495 | elif·test·"$rc"·!=·0;·then |
| 496 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 496 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 497 | » false··#·end·with·an·error·code | 497 | » false··#·end·with·an·error·code |
| 498 | fi | 498 | fi |
| 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 504 | --- | ||
| 505 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 506 | kind:·MachineConfig | ||
| 507 | spec: | ||
| 508 | ··config: | ||
| 509 | ····ignition: | ||
| 510 | ······version:·3.1.0 | ||
| 511 | ····systemd: | ||
| 512 | ······units: | ||
| 513 | ········-·name:·configure-crypto-policy.service | ||
| 514 | ··········enabled:·true | ||
| 515 | ··········contents:·| | ||
| 516 | ············[Unit] | ||
| 517 | ············Before=kubelet.service | ||
| 518 | ············[Service] | ||
| 519 | ············Type=oneshot | ||
| 520 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 521 | ············RemainAfterExit=yes | ||
| 522 | ············[Install] | ||
| 523 | ············WantedBy=multi-user.target | ||
| 524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 529 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 504 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 530 | ··set_fact: | 505 | ··set_fact: |
| Offset 568, 14 lines modified | Offset 543, 39 lines modified | ||
| 568 | ··-·PCI-DSSv4-2.2.7 | 543 | ··-·PCI-DSSv4-2.2.7 |
| 569 | ··-·configure_crypto_policy | 544 | ··-·configure_crypto_policy |
| 570 | ··-·high_severity | 545 | ··-·high_severity |
| 571 | ··-·low_complexity | 546 | ··-·low_complexity |
| 572 | ··-·low_disruption | 547 | ··-·low_disruption |
| 573 | ··-·no_reboot_needed | 548 | ··-·no_reboot_needed |
| 574 | ··-·restrict_strategy | 549 | ··-·restrict_strategy |
| 550 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 551 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 552 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 553 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 554 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 555 | --- | ||
| 556 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 557 | kind:·MachineConfig | ||
| 558 | spec: | ||
| 559 | ··config: | ||
| 560 | ····ignition: | ||
| 561 | ······version:·3.1.0 | ||
| 562 | ····systemd: | ||
| 563 | ······units: | ||
| 564 | ········-·name:·configure-crypto-policy.service | ||
| 565 | ··········enabled:·true | ||
| 566 | ··········contents:·| | ||
| 567 | ············[Unit] | ||
| 568 | ············Before=kubelet.service | ||
| 569 | ············[Service] | ||
| 570 | ············Type=oneshot | ||
| 571 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 572 | ············RemainAfterExit=yes | ||
| 573 | ············[Install] | ||
| 574 | ············WantedBy=multi-user.target | ||
| 575 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 575 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 188990/195221 bytes (96.81%) of diff not shown. | |||
| Offset 14349, 15 lines modified | Offset 14349, 15 lines modified | ||
| 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038130:·6173·206f·6620·3230·323 | 00038130:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16441, 234 lines modified | Offset 16441, 234 lines modified | ||
| 00040380:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00040380:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00040390:·3230·3832·2220·7461·6269·6e64·6578·3d22··2082"·tabindex=" | 00040390:·3230·3832·2220·7461·6269·6e64·6578·3d22··2082"·tabindex=" | ||
| 000403a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000403a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000403b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000403b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 000403c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 000403c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 000403d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 000403d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 000403e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 000403e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 000403f0:·6469·6174·696f·6e20· | 000403f0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00040400:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00040400:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040410:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040420:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040430:·643d·2269·646d·3230·3832·223e·3c74·6162··d="idm2082"><tab | |||
| 00040440:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040450:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040460:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040470:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040480:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00040490:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000404a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 000404b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 000404c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000404d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 000404e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 000404f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00040500:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00040510:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00040520:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00040530:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 00040540:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 00040550:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040560:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040570:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040580:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040590:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 000405a0:·3230·3833·2220·7461·6269·6e64·6578·3d22··2083"·tabindex=" | |||
| 000405b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 000405c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 000405d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 000405e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 000405f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040600:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 00040610:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00040620:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040630:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040640:·7073·6522·2069·643d·2269·646d·3230·3833··pse"·id="idm2083 | |||
| 00040650:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040660:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040670:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040680:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040690:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000406a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000406b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000406c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000406d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000406e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000406f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00040700:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00040710:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00040720:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00040730:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00040740:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 00040750:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 00040760:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 00040770:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 00040780:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 00040790:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 000407a0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 000407b0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 000407c0:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 000407d0:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 000407e0:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 000407f0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 00040800:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 00040810:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 00040820:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 00040830:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 00040840:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 00040850:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 00040860:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040870:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040880:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040890:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 000408a0:·7267·6574·3d22·2369·646d·3230·3834·2220··rget="#idm2084"· | |||
| 000408b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 000408c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 000408d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 000408e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 000408f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040900:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040910:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00040 | 00040410:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 00040 | 00040420:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00040 | 00040430:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00040 | 00040440:·2220·6964·3d22·6964·6d32·3038·3222·3e3c··"·id="idm2082">< | ||
| 00040450:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00040460:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00040470:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 00040480:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 00040490:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 000404a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040960:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040970:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00040980:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00040990:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 000409a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 000409b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000409c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000409d0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 000409e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000409f0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| Max diff block lines reached; 1403437/1435507 bytes (97.77%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ····*·cpe:/o:fedoraproject:fedora:41 | 42 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 43 | ····*·cpe:/o:fedoraproject:fedora:42 | 43 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:43 | 44 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:44 | 45 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:45 | 46 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 412, 21 lines modified | Offset 412, 19 lines modified | ||
| 412 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 412 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 413 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 413 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 414 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 414 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 416 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 416 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 417 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 417 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 418 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 418 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 424 | package | 420 | [[packages]] |
| 421 | name·=·"aide" | ||
| 422 | version·=·"*" | ||
| 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 424 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 425 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 426 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 427 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 430 | #·Remediation·is·applicable·only·in·certain·platforms | 428 | #·Remediation·is·applicable·only·in·certain·platforms |
| 431 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 429 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 455, 38 lines modified | Offset 453, 40 lines modified | ||
| 455 | ··-·PCI-DSSv4-11.5.2 | 453 | ··-·PCI-DSSv4-11.5.2 |
| 456 | ··-·enable_strategy | 454 | ··-·enable_strategy |
| 457 | ··-·low_complexity | 455 | ··-·low_complexity |
| 458 | ··-·low_disruption | 456 | ··-·low_disruption |
| 459 | ··-·medium_severity | 457 | ··-·medium_severity |
| 460 | ··-·no_reboot_needed | 458 | ··-·no_reboot_needed |
| 461 | ··-·package_aide_installed | 459 | ··-·package_aide_installed |
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 467 | package·--add=aide | ||
| 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 469 | [[packages]] | ||
| 470 | name·=·"aide" | ||
| 471 | version·=·"*" | ||
| 472 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 473 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 474 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 475 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 476 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 477 | include·install_aide | 465 | include·install_aide |
| 478 | class·install_aide·{ | 466 | class·install_aide·{ |
| 479 | ··package·{·'aide': | 467 | ··package·{·'aide': |
| 480 | ····ensure·=>·'installed', | 468 | ····ensure·=>·'installed', |
| 481 | ··} | 469 | ··} |
| 482 | } | 470 | } |
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 476 | package·install·aide | ||
| 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 482 | package·--add=aide | ||
| 483 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 483 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 484 | Run·the·following·command·to·generate·a·new·database: | 484 | Run·the·following·command·to·generate·a·new·database: |
| 485 | $·sudo·/usr/sbin/aide·--init | 485 | $·sudo·/usr/sbin/aide·--init |
| 486 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 486 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 487 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 487 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 488 | To·initiate·a·manual·check,·run·the·following·command: | 488 | To·initiate·a·manual·check,·run·the·following·command: |
| 489 | $·sudo·/usr/sbin/aide·--check | 489 | $·sudo·/usr/sbin/aide·--check |
| Offset 817, 39 lines modified | Offset 817, 14 lines modified | ||
| 817 | » echo·"to·see·what·package·to·(re)install"·>&2 | 817 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 818 | » false··#·end·with·an·error·code | 818 | » false··#·end·with·an·error·code |
| 819 | elif·test·"$rc"·!=·0;·then | 819 | elif·test·"$rc"·!=·0;·then |
| 820 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 820 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 821 | » false··#·end·with·an·error·code | 821 | » false··#·end·with·an·error·code |
| 822 | fi | 822 | fi |
| 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 824 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 825 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 826 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 827 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 828 | --- | ||
| 829 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 830 | kind:·MachineConfig | ||
| 831 | spec: | ||
| 832 | ··config: | ||
| 833 | ····ignition: | ||
| 834 | ······version:·3.1.0 | ||
| 835 | ····systemd: | ||
| 836 | ······units: | ||
| 837 | ········-·name:·configure-crypto-policy.service | ||
| 838 | ··········enabled:·true | ||
| 839 | ··········contents:·| | ||
| 840 | ············[Unit] | ||
| 841 | ············Before=kubelet.service | ||
| 842 | ············[Service] | ||
| 843 | ············Type=oneshot | ||
| 844 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 845 | ············RemainAfterExit=yes | ||
| 846 | ············[Install] | ||
| 847 | ············WantedBy=multi-user.target | ||
| 848 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 111907/117622 bytes (95.14%) of diff not shown. | |||
| Offset 14354, 16 lines modified | Offset 14354, 16 lines modified | ||
| 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038180:·2028·6173·206f·6620·3230·323 | 00038180:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00038190:·323 | 00038190:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17379, 176 lines modified | Offset 17379, 176 lines modified | ||
| 00043e20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00043e20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00043e30:·2223·6964·6d32·3533·3422·2074·6162·696e··"#idm2534"·tabin | 00043e30:·2223·6964·6d32·3533·3422·2074·6162·696e··"#idm2534"·tabin | ||
| 00043e40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00043e40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00043e50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00043e50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00043e60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00043e60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00043e70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00043e70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00043e80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00043e80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00043e90:·3e52·656d·6564·6961·7469·6f6e·204 | 00043e90:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 00043ea0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00043eb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00043ec0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00043ed0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00043ee0:·2269·646d·3235·3334·223e·3c74·6162·6c65··"idm2534"><table | |||
| 00043ef0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00043f00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00043f10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00043f20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00043f30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00043ea0:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 00043eb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00043ec0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00043ed0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00043ee0:·6964·3d22·6964·6d32·3533·3422·3e3c·7461··id="idm2534"><ta | |||
| 00043ef0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00043f00:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00043f10:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00043f20:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00043f30:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00043f40:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00043f50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00043f60:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00043f | 00043f40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 00043f80:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00043f | 00043f50:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 00043f60:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00043f70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00043f80:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00043f90:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00043fa0:· | 00043fa0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 00043fb0:· | 00043fb0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 00043fc0:· | 00043fc0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 00043fd0:· | 00043fd0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 00043fe0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 00043ff0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 00044000:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 00044010:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 00044020:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 00044030:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 00044040:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 00044050:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 00044060:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 00044070:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 00044080:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 00044090:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 000440a0:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 000440b0:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 000440c0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 000440d0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 000440e0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 000440f0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 00044100:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 00044110:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 00044120:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 00044130:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 00044140:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 00044150:·7461·7274·3d75·7064·6174·652d·6372·7970··tart=update-cryp | |||
| 00044160:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 00044170:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 00044180:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 00044190:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 000441a0:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 000441b0:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 000441c0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 000441d0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 000441e0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 000441f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00044200:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00044210:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00044220:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00044230:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00044240:·6964·6d32·3533·3522·2074·6162·696e·6465··idm2535"·tabinde | |||
| 00044250:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00044260:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00044270:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00044280:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00044290:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 000442a0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 000442b0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 000442c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000442d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000442e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000442f0:·646d·3235·3335·223e·3c74·6162·6c65·2063··dm2535"><table·c | |||
| 00044300:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00044310:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00044320:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00044330:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00044340:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00044350:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00044360:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00044370:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00044380:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00044390:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000443a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000443b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 000443c0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 000443d0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 000443e0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0004 | 00043fe0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | ||
| 0004 | 00043ff0:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 00044 | 00044000:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| Max diff block lines reached; 1184365/1208569 bytes (98.00%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 578, 39 lines modified | Offset 578, 14 lines modified | ||
| 578 | » echo·"to·see·what·package·to·(re)install"·>&2 | 578 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 579 | » false··#·end·with·an·error·code | 579 | » false··#·end·with·an·error·code |
| 580 | elif·test·"$rc"·!=·0;·then | 580 | elif·test·"$rc"·!=·0;·then |
| 581 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 581 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 582 | » false··#·end·with·an·error·code | 582 | » false··#·end·with·an·error·code |
| 583 | fi | 583 | fi |
| 584 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 585 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 586 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 587 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 588 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 589 | --- | ||
| 590 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 591 | kind:·MachineConfig | ||
| 592 | spec: | ||
| 593 | ··config: | ||
| 594 | ····ignition: | ||
| 595 | ······version:·3.1.0 | ||
| 596 | ····systemd: | ||
| 597 | ······units: | ||
| 598 | ········-·name:·configure-crypto-policy.service | ||
| 599 | ··········enabled:·true | ||
| 600 | ··········contents:·| | ||
| 601 | ············[Unit] | ||
| 602 | ············Before=kubelet.service | ||
| 603 | ············[Service] | ||
| 604 | ············Type=oneshot | ||
| 605 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 606 | ············RemainAfterExit=yes | ||
| 607 | ············[Install] | ||
| 608 | ············WantedBy=multi-user.target | ||
| 609 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 584 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 610 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 585 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 611 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 586 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 612 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 587 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 613 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 588 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 614 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 589 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 615 | ··set_fact: | 590 | ··set_fact: |
| Offset 653, 14 lines modified | Offset 628, 39 lines modified | ||
| 653 | ··-·PCI-DSSv4-2.2.7 | 628 | ··-·PCI-DSSv4-2.2.7 |
| 654 | ··-·configure_crypto_policy | 629 | ··-·configure_crypto_policy |
| 655 | ··-·high_severity | 630 | ··-·high_severity |
| 656 | ··-·low_complexity | 631 | ··-·low_complexity |
| 657 | ··-·low_disruption | 632 | ··-·low_disruption |
| 658 | ··-·no_reboot_needed | 633 | ··-·no_reboot_needed |
| 659 | ··-·restrict_strategy | 634 | ··-·restrict_strategy |
| 635 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 636 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 637 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 638 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 639 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 640 | --- | ||
| 641 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 642 | kind:·MachineConfig | ||
| 643 | spec: | ||
| 644 | ··config: | ||
| 645 | ····ignition: | ||
| 646 | ······version:·3.1.0 | ||
| 647 | ····systemd: | ||
| 648 | ······units: | ||
| 649 | ········-·name:·configure-crypto-policy.service | ||
| 650 | ··········enabled:·true | ||
| 651 | ··········contents:·| | ||
| 652 | ············[Unit] | ||
| 653 | ············Before=kubelet.service | ||
| 654 | ············[Service] | ||
| 655 | ············Type=oneshot | ||
| 656 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 657 | ············RemainAfterExit=yes | ||
| 658 | ············[Install] | ||
| 659 | ············WantedBy=multi-user.target | ||
| 660 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 660 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 661 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. | 661 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. |
| 662 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. | 662 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 663 | Severity: ··high | 663 | Severity: ··high |
| 664 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 664 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 665 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 665 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 666 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 666 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| Offset 2227, 38 lines modified | Offset 2227, 14 lines modified | ||
| 2227 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 2227 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 2228 | fi | 2228 | fi |
| 2229 | fi | 2229 | fi |
| 2230 | else | 2230 | else |
| 2231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2232 | fi | 2232 | fi |
| 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2234 | --- | ||
| 2235 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2236 | kind:·MachineConfig | ||
| 2237 | spec: | ||
| 2238 | ··config: | ||
| 2239 | ····ignition: | ||
| 2240 | ······version:·3.1.0 | ||
| 2241 | ····storage: | ||
| 2242 | ······files: | ||
| 2243 | ······-·contents: | ||
| 2244 | ··········source: | ||
| 2245 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2246 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2247 | ········mode:·0644 | ||
| 2248 | ········path:·/etc/pam.d/password-auth | ||
| 2249 | ········overwrite:·true | ||
| 2250 | ······-·contents: | ||
| 2251 | ··········source: | ||
| 2252 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2253 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2254 | ········mode:·0644 | ||
| 2255 | ········path:·/etc/pam.d/system-auth | ||
| 2256 | ········overwrite:·true | ||
| Max diff block lines reached; 76767/90089 bytes (85.21%) of diff not shown. | |||
| Offset 14332, 16 lines modified | Offset 14332, 16 lines modified | ||
| 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038020:·2020·2020·2028·6173·206f·6620·3230·323 | 00038020:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00038030:·2d3 | 00038030:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" | 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" |
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 | 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 |
| 54 | ··············Catalina | 54 | ··············Catalina |
| 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 57 | ····*·cpe:/o:apple:macos:10.15 | 57 | ····*·cpe:/o:apple:macos:10.15 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t |
| 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d | 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d |
| 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains | 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains |
| 66 | 2·groups·and·2·rules | 66 | 2·groups·and·2·rules |
| 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules | 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00039100:·323 | 00039100:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039100:·3 | 00039100:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00039100:·323 | 00039100:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 15 lines modified | Offset 14601, 15 lines modified | ||
| 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000390f0:·6f66·2032·3032·3 | 000390f0:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039180:·3032·3 | 00039180:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039170:·6620·3230·323 | 00039170:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14603, 15 lines modified | Offset 14603, 15 lines modified | ||
| 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00039110:·3230·323 | 00039110:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens | 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens |
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039460:·2032·3032·3 | 00039460:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14655, 16 lines modified | Offset 14655, 16 lines modified | ||
| 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039450:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039450:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00039460:·3 | 00039460:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039460:·206f·6620·3230·323 | 00039460:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00039460:·323 | 00039460:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi | 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00039470:·7320·6f66·2032·3032·3 | 00039470:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039470:·3032·3 | 00039470:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 16 lines modified | Offset 14657, 16 lines modified | ||
| 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039470:·2028·6173·206f·6620·3230·323 | 00039470:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00039480:·323 | 00039480:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039470:·6620·3230·323 | 00039470:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2028·6173·206f·6620·3230·323 | 00039200:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00039210:·323 | 00039210:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039200:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00039210:·3 | 00039210:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039020:·6620·3230·323 | 00039020:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039020:·3 | 00039020:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039040:·2032·3032·3 | 00039040:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14589, 16 lines modified | Offset 14589, 16 lines modified | ||
| 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039030:·2020·2020·2028·6173·206f·6620·3230·323 | 00039030:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00039040:·2d3 | 00039040:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift | 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039040:·206f·6620·3230·323 | 00039040:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039040:·3032·3 | 00039040:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037e50:·3 | 00037e50:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15053, 203 lines modified | Offset 15053, 203 lines modified | ||
| 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ad40:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ad50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad80:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ad40:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ad50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad80:·646d·3536·3431·223e·3c74·6162·6c65·2063··dm5641"><table·c | |||
| 0003ad90:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ada0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003adb0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003adc0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003add0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ade0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ae00:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003ae10:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ae20:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ae30:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ae40:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae50:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ae60:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003a | 0003ad90:·3634·3122·3e3c·7072·653e·3c63·6f64·653e··641"><pre><code> | ||
| 0003ada0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003adb0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003adc0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ae80:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003ae90:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003aea0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003aeb0:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003aec0:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003aed0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003aee0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003aef0:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 0003af00:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003af10:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003af20:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003af30:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003af40:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003af50:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003af60:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003af70:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003af80:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003a | 0003add0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003a | 0003ade0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003a | 0003adf0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003a | 0003ae00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003a | 0003ae10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a | 0003ae20:·3536·3432·2220·7461·6269·6e64·6578·3d22··5642"·tabindex=" | ||
| 0003a | 0003ae30:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ae40:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ae50:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ae60:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ae70:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ae80:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003ae90:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003aea0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003aeb0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aec0:·7073·6522·2069·643d·2269·646d·3536·3432··pse"·id="idm5642 | |||
| 0003aed0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003aee0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003aef0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003af00:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003af10:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003af20:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003af30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af40:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003af70:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003af80:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003af90:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003afa0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003afb0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003afc0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003afd0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003afe0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003aff0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b000:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b010:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b020:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b030:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b040:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b050:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b060:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003b070:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b080:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b090:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b0a0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b0b0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b0c0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b0d0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b0e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b0f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b100:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b110:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b120:·7267·6574·3d22·2369·646d·3536·3433·2220··rget="#idm5643"· | |||
| 0003b130:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b140:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b150:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| Max diff block lines reached; 763617/791547 bytes (96.47%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 14 lines modified | Offset 115, 19 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | #·Remediation·is·applicable·only·in·certain·platforms | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 128 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 132 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 152, 38 lines modified | Offset 157, 33 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 159 | ··-·low_complexity |
| 155 | ··-·low_disruption | 160 | ··-·low_disruption |
| 156 | ··-·medium_severity | 161 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·--add=aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 169 | include·install_aide |
| 175 | class·install_aide·{ | 170 | class·install_aide·{ |
| 176 | ··package·{·'aide': | 171 | ··package·{·'aide': |
| 177 | ····ensure·=>·'installed', | 172 | ····ensure·=>·'installed', |
| 178 | ··} | 173 | ··} |
| 179 | } | 174 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=aide | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 715, 14 lines modified | Offset 715, 19 lines modified | ||
| 715 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 715 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 716 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 716 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 717 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 717 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 718 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 718 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 719 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 719 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 720 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 720 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 721 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 721 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 723 | [[packages]] | ||
| 724 | name·=·"sudo" | ||
| 725 | version·=·"*" | ||
| 722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 727 | #·Remediation·is·applicable·only·in·certain·platforms | 731 | #·Remediation·is·applicable·only·in·certain·platforms |
| 728 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 732 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 749, 38 lines modified | Offset 754, 33 lines modified | ||
| 749 | ··-·PCI-DSSv4-2.2.6 | 754 | ··-·PCI-DSSv4-2.2.6 |
| 750 | ··-·enable_strategy | 755 | ··-·enable_strategy |
| 751 | ··-·low_complexity | 756 | ··-·low_complexity |
| 752 | ··-·low_disruption | 757 | ··-·low_disruption |
| 753 | ··-·medium_severity | 758 | ··-·medium_severity |
| 754 | ··-·no_reboot_needed | 759 | ··-·no_reboot_needed |
| 755 | ··-·package_sudo_installed | 760 | ··-·package_sudo_installed |
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 757 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 758 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 759 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 760 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 761 | package·--add=sudo | ||
| 762 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 763 | [[packages]] | ||
| 764 | name·=·"sudo" | ||
| 765 | version·=·"*" | ||
| 766 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 761 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 767 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 762 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 768 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 763 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 769 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 764 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 770 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 765 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 771 | include·install_sudo | 766 | include·install_sudo |
| Max diff block lines reached; 57767/63364 bytes (91.17%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037e50:·3 | 00037e50:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15060, 202 lines modified | Offset 15060, 202 lines modified | ||
| 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | ||
| 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ada0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003adb0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003adc0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003add0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ade0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003adf0:·646d·3536·3431·223e·3c70·7265·3e3c·636f··dm5641"><pre><co | |||
| 0003ae00:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae10:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae20:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ada0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003adb0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003adc0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003add0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ade0:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 0003adf0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ae00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ae10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ae20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ae30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ae40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ae70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ae80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ae90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003aea0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003aeb0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003aec0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003aed0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003aee0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003aef0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003af00:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003af10:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003af20:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003af30:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003af40:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003af50:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003af60:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003af70:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003af80:·0a20·2020·2079·756d·2069·6e73·7461·6c6c··.····yum·install | |||
| 0003af90:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003afa0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003afb0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003afc0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003afd0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003afe0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003a | 0003ae30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003ae40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ae50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ae60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ae70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ae80:·6964·6d35·3634·3222·2074·6162·696e·6465··idm5642"·tabinde | |||
| 0003ae90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003aea0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aeb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aec0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003aed0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aee0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003aef0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003af00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003af10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003af20:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003af30:·3634·3222·3e3c·7461·626c·6520·636c·6173··642"><table·clas | |||
| 0003af40:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003af50:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003af60:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003af70:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003af80:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003af90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003afa0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003afb0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003afc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afd0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003afe0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003aff0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b000:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b010:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b020:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b030:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b040:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b050:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b060:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b070:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b080:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b090:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b0a0:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b0b0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b0c0:·6465·2220·3b20·7468·656e·0a20·2020·2079··de"·;·then.····y | |||
| 0003b0d0:·756d·2069·6e73·7461·6c6c·202d·7920·2261··um·install·-y·"a | |||
| 0003b0e0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b0f0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b100:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b110:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b120:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b130:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b140:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b150:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b160:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b170:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b180:·2d74·6172·6765·743d·2223·6964·6d35·3634··-target="#idm564 | |||
| 0003b190:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003b1a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b1b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| Max diff block lines reached; 793509/821301 bytes (96.62%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 116, 14 lines modified | Offset 116, 19 lines modified | ||
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | 132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 153, 38 lines modified | Offset 158, 33 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 160 | ··-·low_complexity |
| 156 | ··-·low_disruption | 161 | ··-·low_disruption |
| 157 | ··-·medium_severity | 162 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·--add=aide | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | 170 | include·install_aide |
| 176 | class·install_aide·{ | 171 | class·install_aide·{ |
| 177 | ··package·{·'aide': | 172 | ··package·{·'aide': |
| 178 | ····ensure·=>·'installed', | 173 | ····ensure·=>·'installed', |
| 179 | ··} | 174 | ··} |
| 180 | } | 175 | } |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 1247, 14 lines modified | Offset 1247, 19 lines modified | ||
| 1247 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 1247 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 1248 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1248 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1249 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1249 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1250 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1250 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1253 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1253 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1255 | [[packages]] | ||
| 1256 | name·=·"sudo" | ||
| 1257 | version·=·"*" | ||
| 1254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1255 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1256 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1257 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1258 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1259 | #·Remediation·is·applicable·only·in·certain·platforms | 1263 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1260 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1264 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1281, 38 lines modified | Offset 1286, 33 lines modified | ||
| 1281 | ··-·PCI-DSSv4-2.2.6 | 1286 | ··-·PCI-DSSv4-2.2.6 |
| 1282 | ··-·enable_strategy | 1287 | ··-·enable_strategy |
| 1283 | ··-·low_complexity | 1288 | ··-·low_complexity |
| 1284 | ··-·low_disruption | 1289 | ··-·low_disruption |
| 1285 | ··-·medium_severity | 1290 | ··-·medium_severity |
| 1286 | ··-·no_reboot_needed | 1291 | ··-·no_reboot_needed |
| 1287 | ··-·package_sudo_installed | 1292 | ··-·package_sudo_installed |
| 1288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1291 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1292 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1293 | package·--add=sudo | ||
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1295 | [[packages]] | ||
| 1296 | name·=·"sudo" | ||
| 1297 | version·=·"*" | ||
| 1298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1294 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1295 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1296 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1297 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1303 | include·install_sudo | 1298 | include·install_sudo |
| Max diff block lines reached; 63238/68851 bytes (91.85%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037e60:·3 | 00037e60:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15044, 203 lines modified | Offset 15044, 203 lines modified | ||
| 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | ||
| 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003acb0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003acb0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003acc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003acd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ace0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003acf0:·6964·6d35·3634·3122·3e3c·7461·626c·6520··idm5641"><table· | |||
| 0003ad00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ad10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ad20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ad30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ad40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ad50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ad60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ad70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ad80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ad90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ada0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003adb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003adc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003add0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ade0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003adf0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003ae00:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003ae10:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003ae20:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003ae30:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003ae40:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003ae50:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003ae60:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003ae70:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003ae80:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003ae90:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 0003aea0:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003aeb0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003aec0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003aed0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003aee0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003aef0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003af00:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003af10:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003af20:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003af30:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003af40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003af50:·6d35·3634·3222·2074·6162·696e·6465·783d··m5642"·tabindex= | |||
| 0003af60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003af70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003af80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003af90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003afa0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003afb0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003a | 0003acc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003a | 0003acd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003a | 0003ace0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003a | 0003acf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003ad00:·3536·3431·223e·3c70·7265·3e3c·636f·6465··5641"><pre><code | |||
| 0003ad10:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad20:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad30:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b000:·3536·3432·223e·3c74·6162·6c65·2063·6c61··5642"><table·cla | |||
| 0003b010:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b020:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b030:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b040:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b050:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b060:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b070:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b080:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b090:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0a0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b0b0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b0c0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b0d0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b0e0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b0f0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b100:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b110:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b120:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b130:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b140:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b150:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b160:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b170:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b180:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b190:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b1a0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b1b0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b1c0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b1d0:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 0003b1e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b1f0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b200:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b210:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b220:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b230:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b240:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b250:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b260:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b270:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b280:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b290:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b2a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b2b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| Max diff block lines reached; 610916/638846 bytes (95.63%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 150, 38 lines modified | Offset 155, 33 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 157 | ··-·low_complexity |
| 153 | ··-·low_disruption | 158 | ··-·low_disruption |
| 154 | ··-·medium_severity | 159 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 167 | include·install_aide |
| 173 | class·install_aide·{ | 168 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 169 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 170 | ····ensure·=>·'installed', |
| 176 | ··} | 171 | ··} |
| 177 | } | 172 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 556, 14 lines modified | Offset 556, 19 lines modified | ||
| 556 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 556 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 557 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 557 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 558 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 558 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 559 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 559 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 560 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 560 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 561 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 561 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 564 | [[packages]] | ||
| 565 | name·=·"sudo" | ||
| 566 | version·=·"*" | ||
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 567 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 568 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 569 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 570 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 571 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 568 | #·Remediation·is·applicable·only·in·certain·platforms | 572 | #·Remediation·is·applicable·only·in·certain·platforms |
| 569 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 573 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 590, 38 lines modified | Offset 595, 33 lines modified | ||
| 590 | ··-·PCI-DSSv4-2.2.6 | 595 | ··-·PCI-DSSv4-2.2.6 |
| 591 | ··-·enable_strategy | 596 | ··-·enable_strategy |
| 592 | ··-·low_complexity | 597 | ··-·low_complexity |
| 593 | ··-·low_disruption | 598 | ··-·low_disruption |
| 594 | ··-·medium_severity | 599 | ··-·medium_severity |
| 595 | ··-·no_reboot_needed | 600 | ··-·no_reboot_needed |
| 596 | ··-·package_sudo_installed | 601 | ··-·package_sudo_installed |
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 602 | package·--add=sudo | ||
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 604 | [[packages]] | ||
| 605 | name·=·"sudo" | ||
| 606 | version·=·"*" | ||
| 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 602 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 603 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 604 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 605 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 606 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 612 | include·install_sudo | 607 | include·install_sudo |
| Max diff block lines reached; 44983/50699 bytes (88.73%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e40:·6f66·2032·3032·3 | 00037e40:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 47113, 75 lines modified | Offset 47113, 75 lines modified | ||
| 000b8080:·2d74·6172·6765·743d·2223·6964·6d33·3735··-target="#idm375 | 000b8080:·2d74·6172·6765·743d·2223·6964·6d33·3735··-target="#idm375 | ||
| 000b8090:·3934·2220·7461·6269·6e64·6578·3d22·3022··94"·tabindex="0" | 000b8090:·3934·2220·7461·6269·6e64·6578·3d22·3022··94"·tabindex="0" | ||
| 000b80a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 000b80a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 000b80b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 000b80b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000b80c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000b80c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000b80d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000b80d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000b80e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000b80e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000b80f0:·6174·696f·6e20· | 000b80f0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 000b8100:· | 000b8100:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 000b8110:· | 000b8110:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 000b8120:·6 | 000b8120:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 000b8130:· | 000b8130:·7073·6522·2069·643d·2269·646d·3337·3539··pse"·id="idm3759 | ||
| 000b8140:·3 | 000b8140:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | ||
| 000b8150:· | 000b8150:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 000b8160:· | 000b8160:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 000b8170:· | 000b8170:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 000b8180:· | 000b8180:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 000b8190:· | 000b8190:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 000b81a0:· | 000b81a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 000b81b0:· | 000b81b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 000b81c0:· | 000b81c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 000b81d0:· | 000b81d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 000b81e0:· | 000b81e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 000b81f0:· | 000b81f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 000b8200:· | 000b8200:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 000b8210:· | 000b8210:·2f74·683e·3c74·643e·6469·7361·626c·653c··/th><td>disable< | ||
| 000b8220:· | 000b8220:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 000b8230:· | 000b8230:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | ||
| 000b8240:·6163·6b61·6765·202d·2d72·656d·6f76·653d··ackage·--remove= | |||
| 000b8250:·6468·6370·0a3c·2f63·6f64·653e·3c2f·7072··dhcp.</code></pr | |||
| 000b8260:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 000b8270:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 000b82 | 000b8240:·7564·6520·7265·6d6f·7665·5f64·6863·700a··ude·remove_dhcp. | ||
| 000b8250:·0a63·6c61·7373·2072·656d·6f76·655f·6468··.class·remove_dh | |||
| 000b8260:·6370·207b·0a20·2070·6163·6b61·6765·207b··cp·{.··package·{ | |||
| 000b8270:·2027·6468·6370·273a·0a20·2020·2065·6e73···'dhcp':.····ens | |||
| 000b8280:·7572·6520·3d26·6774·3b20·2770·7572·6765··ure·=>·'purge | |||
| 000b8290:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 000b82a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000b82b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 000b82c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 000b82d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 000b82e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 000b82f0:·3337·3539·3522·2074·6162·696e·6465·783d··37595"·tabindex= | |||
| 000b8300:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 000b8310:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 000b8320:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 000b8330:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 000b8340:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 000b8350:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 000b8360:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 000b8370:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000b8380:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000b8 | 000b8390:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 000b83a0:·6d33·3735·3935·223e·3c74·6162·6c65·2063··m37595"><table·c | |||
| 000b83b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000b83c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000b83d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000b83e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000b83f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000b8400:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000b8410:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 000b82a0:·6172·6765·743d·2223·6964·6d33·3735·3935··arget="#idm37595 | |||
| 000b82b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 000b82c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 000b82d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 000b82e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 000b82f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 000b8300:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 000b8310:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 000b8320:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000b8330:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000b8340:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000b8350:·6522·2069·643d·2269·646d·3337·3539·3522··e"·id="idm37595" | |||
| 000b8360:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000b8370:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000b8380:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000b8390:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000b83a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000b8 | 000b8420:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 000b8 | 000b8430:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 000b83d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000b8 | 000b8440:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 000b8450:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000b8 | 000b8460:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 000b84 | 000b8470:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | ||
| 000b84 | 000b8480:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 000b8490:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 000b84a0:·3e0a·7061·636b·6167·6520·2d2d·7265·6d6f··>.package·--remo | |||
| 000b84b0:·7665·3d64·6863·700a·3c2f·636f·6465·3e3c··ve=dhcp.</code>< | |||
| 000b8420:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000b8430:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | |||
| 000b8440:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 000b8450:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 000b8460:·6520·7265·6d6f·7665·5f64·6863·700a·0a63··e·remove_dhcp..c | |||
| 000b8470:·6c61·7373·2072·656d·6f76·655f·6468·6370··lass·remove_dhcp | |||
| 000b8480:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 000b8490:·6468·6370·273a·0a20·2020·2065·6e73·7572··dhcp':.····ensur | |||
| 000b84a0:·6520·3d26·6774·3b20·2770·7572·6765·6427··e·=>·'purged' | |||
| 000b84b0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 000b84c0:·2f70·7265·3e3c·2f64·6976·3e3c·2f64·6976··/pre></div></div | 000b84c0:·2f70·7265·3e3c·2f64·6976·3e3c·2f64·6976··/pre></div></div | ||
| 000b84d0:·3e3c·2f74·643e·3c2f·7472·3e3c·2f74·626f··></td></tr></tbo | 000b84d0:·3e3c·2f74·643e·3c2f·7472·3e3c·2f74·626f··></td></tr></tbo | ||
| 000b84e0:·6479·3e3c·2f74·6162·6c65·3e3c·2f74·643e··dy></table></td> | 000b84e0:·6479·3e3c·2f74·6162·6c65·3e3c·2f74·643e··dy></table></td> | ||
| 000b84f0:·3c2f·7472·3e3c·7472·2064·6174·612d·7474··</tr><tr·data-tt | 000b84f0:·3c2f·7472·3e3c·7472·2064·6174·612d·7474··</tr><tr·data-tt | ||
| 000b8500:·2d69·643d·2263·6869·6c64·7265·6e2d·7863··-id="children-xc | 000b8500:·2d69·643d·2263·6869·6c64·7265·6e2d·7863··-id="children-xc | ||
| 000b8510:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000b8510:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000b8520:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000b8520:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 47668, 76 lines modified | Offset 47668, 76 lines modified | ||
| 000ba330:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 000ba330:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 000ba340:·6964·6d33·3832·3434·2220·7461·6269·6e64··idm38244"·tabind | 000ba340:·6964·6d33·3832·3434·2220·7461·6269·6e64··idm38244"·tabind | ||
| 000ba350:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 000ba350:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| Max diff block lines reached; 114136/124978 bytes (91.32%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 10148, 33 lines modified | Offset 10148, 33 lines modified | ||
| 10148 | ··-·PCI-DSSv4-2.2.4 | 10148 | ··-·PCI-DSSv4-2.2.4 |
| 10149 | ··-·disable_strategy | 10149 | ··-·disable_strategy |
| 10150 | ··-·low_complexity | 10150 | ··-·low_complexity |
| 10151 | ··-·low_disruption | 10151 | ··-·low_disruption |
| 10152 | ··-·medium_severity | 10152 | ··-·medium_severity |
| 10153 | ··-·no_reboot_needed | 10153 | ··-·no_reboot_needed |
| 10154 | ··-·package_dhcp_removed | 10154 | ··-·package_dhcp_removed |
| 10155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10160 | package·--remove=dhcp | ||
| 10161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10166 | include·remove_dhcp | 10160 | include·remove_dhcp |
| 10167 | class·remove_dhcp·{ | 10161 | class·remove_dhcp·{ |
| 10168 | ··package·{·'dhcp': | 10162 | ··package·{·'dhcp': |
| 10169 | ····ensure·=>·'purged', | 10163 | ····ensure·=>·'purged', |
| 10170 | ··} | 10164 | ··} |
| 10171 | } | 10165 | } |
| 10166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10171 | package·--remove=dhcp | ||
| 10172 | Group ·Mail·Server·Software· Group·contains·1·rule | 10172 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 10173 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 10173 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 10174 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 10174 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 10175 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 10175 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 10176 | possible. | 10176 | possible. |
| 10177 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. | 10177 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. |
| Offset 10256, 33 lines modified | Offset 10256, 33 lines modified | ||
| 10256 | ··-·NIST-800-53-CM-7(b) | 10256 | ··-·NIST-800-53-CM-7(b) |
| 10257 | ··-·disable_strategy | 10257 | ··-·disable_strategy |
| 10258 | ··-·low_complexity | 10258 | ··-·low_complexity |
| 10259 | ··-·low_disruption | 10259 | ··-·low_disruption |
| 10260 | ··-·medium_severity | 10260 | ··-·medium_severity |
| 10261 | ··-·no_reboot_needed | 10261 | ··-·no_reboot_needed |
| 10262 | ··-·package_sendmail_removed | 10262 | ··-·package_sendmail_removed |
| 10263 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10264 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10265 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10266 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10267 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10268 | package·--remove=sendmail | ||
| 10269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10263 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10270 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10264 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10271 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10265 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10272 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10266 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10273 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10267 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10274 | include·remove_sendmail | 10268 | include·remove_sendmail |
| 10275 | class·remove_sendmail·{ | 10269 | class·remove_sendmail·{ |
| 10276 | ··package·{·'sendmail': | 10270 | ··package·{·'sendmail': |
| 10277 | ····ensure·=>·'purged', | 10271 | ····ensure·=>·'purged', |
| 10278 | ··} | 10272 | ··} |
| 10279 | } | 10273 | } |
| 10274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10279 | package·--remove=sendmail | ||
| 10280 | Group ·Obsolete·Services· Group·contains·6·groups·and·11·rules | 10280 | Group ·Obsolete·Services· Group·contains·6·groups·and·11·rules |
| 10281 | _\x8[_\x8r_\x8e_\x8f_\x8] ·This·section·discusses·a·number·of·network-visible·services·which·have·historically | 10281 | _\x8[_\x8r_\x8e_\x8f_\x8] ·This·section·discusses·a·number·of·network-visible·services·which·have·historically |
| 10282 | caused·problems·for·system·security,·and·for·which·disabling·or·severely·limiting·the·service | 10282 | caused·problems·for·system·security,·and·for·which·disabling·or·severely·limiting·the·service |
| 10283 | has·been·the·best·available·guidance·for·some·time.·As·a·result·of·this,·many·of·these | 10283 | has·been·the·best·available·guidance·for·some·time.·As·a·result·of·this,·many·of·these |
| 10284 | services·are·not·installed·as·part·of·Oracle·Linux·7·by·default. | 10284 | services·are·not·installed·as·part·of·Oracle·Linux·7·by·default. |
| 10285 | Organizations·which·are·running·these·services·should·switch·to·more·secure·equivalents·as | 10285 | Organizations·which·are·running·these·services·should·switch·to·more·secure·equivalents·as |
| Offset 10362, 33 lines modified | Offset 10362, 33 lines modified | ||
| 10362 | ··-·PCI-DSSv4-2.2.4 | 10362 | ··-·PCI-DSSv4-2.2.4 |
| 10363 | ··-·disable_strategy | 10363 | ··-·disable_strategy |
| 10364 | ··-·low_complexity | 10364 | ··-·low_complexity |
| 10365 | ··-·low_disruption | 10365 | ··-·low_disruption |
| 10366 | ··-·low_severity | 10366 | ··-·low_severity |
| 10367 | ··-·no_reboot_needed | 10367 | ··-·no_reboot_needed |
| 10368 | ··-·package_xinetd_removed | 10368 | ··-·package_xinetd_removed |
| 10369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10374 | package·--remove=xinetd | ||
| 10375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10380 | include·remove_xinetd | 10374 | include·remove_xinetd |
| 10381 | class·remove_xinetd·{ | 10375 | class·remove_xinetd·{ |
| 10382 | ··package·{·'xinetd': | 10376 | ··package·{·'xinetd': |
| 10383 | ····ensure·=>·'purged', | 10377 | ····ensure·=>·'purged', |
| 10384 | ··} | 10378 | ··} |
| 10385 | } | 10379 | } |
| 10380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 16629/21849 bytes (76.11%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16434, 203 lines modified | Offset 16434, 203 lines modified | ||
| 00040310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00040310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00040320:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | 00040320:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | ||
| 00040330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00040330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00040340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00040340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00040350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00040350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00040360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00040360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00040370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00040370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00040380:·6564·6961·7469·6f6e·20 | 00040380:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00040390:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 00040390:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 000403a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000403b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000403c0:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 000403d0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 000403e0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000403f0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040400:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040410:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040420:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040430:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040440:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040450:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040460:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040470:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040480:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040490:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000404a0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 000404b0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000404c0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 000404d0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 000404e0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 000404f0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 00040500:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 00040510:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 00040520:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 00040530:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 00040540:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 00040550:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 00040560:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 00040570:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 00040580:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 00040590:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 000405a0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 000405b0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 000405c0:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 000405d0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 000405e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 000405f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040600:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040610:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040620:·6172·6765·743d·2223·6964·6d35·3634·3222··arget="#idm5642" | |||
| 00040630:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040640:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040650:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00040660:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00040670:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00040680:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040690:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00040 | 000403a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00040 | 000403b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00040 | 000403c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00040 | 000403d0:·6522·2069·643d·2269·646d·3536·3431·223e··e"·id="idm5641"> | ||
| 000403e0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 000403f0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00040400:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 00040410:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 00040420:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040430:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040440:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040450:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040460:·6172·6765·743d·2223·6964·6d35·3634·3222··arget="#idm5642" | |||
| 00040470:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040480:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040490:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000404a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000404b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000404c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 000404d0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 000404e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000404f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000406e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000406f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00040700:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00040710:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00040720:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00040730:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040740:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040750:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040760:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040770:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00040780:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00040790:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 000407a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 000407b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 000407c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 000407d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 000407e0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 000407f0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 00040800:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 00040810:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 00040820:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 00040830:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 00040840:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 00040850:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 00040860:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 00040870:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 00040880:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 00040890:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 000408a0:·2d20·4449·5341·2d53·5449·472d·4f4c·3037··-·DISA-STIG-OL07 | |||
| 000408b0:·2d30·302d·3032·3030·3239·0a20·202d·204e··-00-020029.··-·N | |||
| 000408c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| Max diff block lines reached; 232922/260714 bytes (89.34%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:7 | 44 | ····*·cpe:/o:oracle:linux:7 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 422, 14 lines modified | Offset 422, 19 lines modified | ||
| 422 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 422 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 423 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 423 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 424 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 424 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 425 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 425 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 426 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 426 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 427 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 427 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 428 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 428 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 430 | [[packages]] | ||
| 431 | name·=·"aide" | ||
| 432 | version·=·"*" | ||
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 430 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 431 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 432 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 433 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 434 | #·Remediation·is·applicable·only·in·certain·platforms | 438 | #·Remediation·is·applicable·only·in·certain·platforms |
| 435 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 439 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 459, 38 lines modified | Offset 464, 33 lines modified | ||
| 459 | ··-·PCI-DSSv4-11.5.2 | 464 | ··-·PCI-DSSv4-11.5.2 |
| 460 | ··-·enable_strategy | 465 | ··-·enable_strategy |
| 461 | ··-·low_complexity | 466 | ··-·low_complexity |
| 462 | ··-·low_disruption | 467 | ··-·low_disruption |
| 463 | ··-·medium_severity | 468 | ··-·medium_severity |
| 464 | ··-·no_reboot_needed | 469 | ··-·no_reboot_needed |
| 465 | ··-·package_aide_installed | 470 | ··-·package_aide_installed |
| 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 471 | package·--add=aide | ||
| 472 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 473 | [[packages]] | ||
| 474 | name·=·"aide" | ||
| 475 | version·=·"*" | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 481 | include·install_aide | 476 | include·install_aide |
| 482 | class·install_aide·{ | 477 | class·install_aide·{ |
| 483 | ··package·{·'aide': | 478 | ··package·{·'aide': |
| 484 | ····ensure·=>·'installed', | 479 | ····ensure·=>·'installed', |
| 485 | ··} | 480 | ··} |
| 486 | } | 481 | } |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 487 | package·--add=aide | ||
| 487 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 488 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 488 | Run·the·following·command·to·generate·a·new·database: | 489 | Run·the·following·command·to·generate·a·new·database: |
| 489 | $·sudo·/usr/sbin/aide·--init | 490 | $·sudo·/usr/sbin/aide·--init |
| 490 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 491 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 491 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 492 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 492 | To·initiate·a·manual·check,·run·the·following·command: | 493 | To·initiate·a·manual·check,·run·the·following·command: |
| 493 | $·sudo·/usr/sbin/aide·--check | 494 | $·sudo·/usr/sbin/aide·--check |
| Offset 4723, 38 lines modified | Offset 4723, 14 lines modified | ||
| 4723 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 4723 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 4724 | fi | 4724 | fi |
| 4725 | fi | 4725 | fi |
| 4726 | else | 4726 | else |
| 4727 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 4727 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 4728 | fi | 4728 | fi |
| 4729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4730 | --- | ||
| 4731 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 4732 | kind:·MachineConfig | ||
| 4733 | spec: | ||
| 4734 | ··config: | ||
| 4735 | ····ignition: | ||
| 4736 | ······version:·3.1.0 | ||
| 4737 | ····storage: | ||
| 4738 | ······files: | ||
| 4739 | ······-·contents: | ||
| 4740 | ··········source: | ||
| 4741 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 4742 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 4743 | ········mode:·0644 | ||
| 4744 | ········path:·/etc/pam.d/password-auth | ||
| 4745 | ········overwrite:·true | ||
| 4746 | ······-·contents: | ||
| 4747 | ··········source: | ||
| 4748 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 4749 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 4750 | ········mode:·0644 | ||
| 4751 | ········path:·/etc/pam.d/system-auth | ||
| 4752 | ········overwrite:·true | ||
| 4753 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4754 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4755 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 4731 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 4756 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4732 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4757 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 4733 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 4758 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 4734 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 4759 | ····authselect | 4735 | ····authselect |
| Offset 4873, 14 lines modified | Offset 4849, 38 lines modified | ||
| 4873 | ··-·PCI-DSSv4-8.3.1 | 4849 | ··-·PCI-DSSv4-8.3.1 |
| 4874 | ··-·configure_strategy | 4850 | ··-·configure_strategy |
| 4875 | ··-·high_severity | 4851 | ··-·high_severity |
| 4876 | ··-·low_complexity | 4852 | ··-·low_complexity |
| 4877 | ··-·medium_disruption | 4853 | ··-·medium_disruption |
| 4878 | ··-·no_empty_passwords | 4854 | ··-·no_empty_passwords |
| Max diff block lines reached; 18654/32204 bytes (57.92%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 232 lines modified | Offset 15073, 232 lines modified | ||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ae80:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ae80:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ae90:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aea0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aeb0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aec0:·646d·3631·3732·223e·3c74·6162·6c65·2063··dm6172"><table·c | |||
| 0003aed0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003aee0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003aef0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003af00:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003af10:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003af20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003af30:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003af40:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003af50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003af60:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003af70:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003af80:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003af90:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003afa0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003afb0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003afc0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003afd0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003afe0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003aff0:·666f·726d·730a·6966·2028·205b·2021·202d··forms.if·(·[·!·- | |||
| 0003b000:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b010:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b020:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b030:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b040:·3b20·2120·2820·5b20·2224·7b63·6f6e·7461··;·!·(·[·"${conta | |||
| 0003b050:·696e·6572·3a2d·7d22·203d·3d20·2262·7772··iner:-}"·==·"bwr | |||
| 0003b060:·6170·2d6f·7362·7569·6c64·2220·5d20·2920··ap-osbuild"·]·)· | |||
| 0003b070:·2920·2661·6d70·3b26·616d·703b·207b·205b··)·&&·{·[ | |||
| 0003b080:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b090:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b0a0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b0b0:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | |||
| 0003b0c0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b0d0:·202d·2d71·7569·6574·2022·6472·6163·7574···--quiet·"dracut | |||
| 0003b0e0:·2d66·6970·7322·203b·2074·6865·6e0a·2020··-fips"·;·then.·· | |||
| 0003b0f0:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003b100:·2022·6472·6163·7574·2d66·6970·7322·0a66···"dracut-fips".f | |||
| 0003b110:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003b120:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b130:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b140:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b150:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b160:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b170:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b180:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b190:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b1a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b1b0:·743d·2223·6964·6d36·3137·3322·2074·6162··t="#idm6173"·tab | |||
| 0003b1c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b1d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b1e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b1f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b200:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b210:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b220:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b230:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b240:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b250:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b260:·643d·2269·646d·3631·3733·223e·3c74·6162··d="idm6173"><tab | |||
| 0003b270:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b280:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b290:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b2e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b2f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b300:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b310:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b320:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b330:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b340:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b350:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b360:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b370:·7265·2064·7261·6375·742d·6669·7073·2069··re·dracut-fips·i | |||
| 0003b380:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b390:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b3a0:·2064·7261·6375·742d·6669·7073·0a20·2020···dracut-fips.··· | |||
| 0003b3b0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b3c0:·2020·7768·656e·3a0a·2020·2d20·2820·616e····when:.··-·(·an | |||
| 0003b3d0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b3e0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b3f0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b400:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b410:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b420:·7222·5d0a·2020·2020·616e·6420·6e6f·7420··r"].····and·not· | |||
| 0003b430:·2820·6c6f·6f6b·7570·2822·656e·7622·2c20··(·lookup("env",· | |||
| 0003b440:·2263·6f6e·7461·696e·6572·2229·203d·3d20··"container")·==· | |||
| 0003b450:·2262·7772·6170·2d6f·7362·7569·6c64·2220··"bwrap-osbuild"· | |||
| 0003b460:·2920·290a·2020·2d20·616e·7369·626c·655f··)·).··-·ansible_ | |||
| 0003b470:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b480:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b490:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b4a0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b4b0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b4c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b4d0:·2e31·302e·312e·320a·2020·2d20·4e49·5354··.10.1.2.··-·NIST | |||
| Max diff block lines reached; 629532/661326 bytes (95.19%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:7 | 54 | ····*·cpe:/o:oracle:linux:7 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 99, 14 lines modified | Offset 99, 19 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dracut-fips" | ||
| 109 | version·=·"*" | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | 115 | #·Remediation·is·applicable·only·in·certain·platforms |
| 112 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 116 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 143, 38 lines modified | Offset 148, 33 lines modified | ||
| 143 | ··-·NIST-800-53-SC-13 | 148 | ··-·NIST-800-53-SC-13 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_dracut-fips_installed | 154 | ··-·package_dracut-fips_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=dracut-fips | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"dracut-fips" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | include·install_dracut-fips | 160 | include·install_dracut-fips |
| 166 | class·install_dracut-fips·{ | 161 | class·install_dracut-fips·{ |
| 167 | ··package·{·'dracut-fips': | 162 | ··package·{·'dracut-fips': |
| 168 | ····ensure·=>·'installed', | 163 | ····ensure·=>·'installed', |
| 169 | ··} | 164 | ··} |
| 170 | } | 165 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=dracut-fips | ||
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 173 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 173 | $·sudo·yum·install·dracut-fips | 174 | $·sudo·yum·install·dracut-fips |
| 174 | dracut·-f | 175 | dracut·-f |
| 175 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 176 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 176 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 177 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 177 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 178 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 7529, 14 lines modified | Offset 7529, 19 lines modified | ||
| 7529 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 7529 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 7530 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 7530 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 7531 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 7531 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 7532 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 7532 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 7533 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 7533 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 7534 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 7534 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| 7535 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule | 7535 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule |
| 7536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7537 | [[packages]] | ||
| 7538 | name·=·"screen" | ||
| 7539 | version·=·"*" | ||
| 7536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7541 | #·Remediation·is·applicable·only·in·certain·platforms | 7545 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7542 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7546 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7564, 52 lines modified | Offset 7569, 51 lines modified | ||
| 7564 | ··-·NIST-800-53-CM-6(a) | 7569 | ··-·NIST-800-53-CM-6(a) |
| 7565 | ··-·enable_strategy | 7570 | ··-·enable_strategy |
| 7566 | ··-·low_complexity | 7571 | ··-·low_complexity |
| 7567 | ··-·low_disruption | 7572 | ··-·low_disruption |
| 7568 | ··-·medium_severity | 7573 | ··-·medium_severity |
| 7569 | ··-·no_reboot_needed | 7574 | ··-·no_reboot_needed |
| 7570 | ··-·package_screen_installed | 7575 | ··-·package_screen_installed |
| 7571 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7572 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7573 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7574 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7575 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 7576 | package·--add=screen | ||
| 7577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7578 | [[packages]] | ||
| 7579 | name·=·"screen" | ||
| 7580 | version·=·"*" | ||
| 7581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7586 | include·install_screen | 7581 | include·install_screen |
| Max diff block lines reached; 50175/56435 bytes (88.91%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037e00:·2d32·3 | 00037e00:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 18220, 273 lines modified | Offset 18220, 273 lines modified | ||
| 000472b0:·2d74·6172·6765·743d·2223·6964·6d39·3837··-target="#idm987 | 000472b0:·2d74·6172·6765·743d·2223·6964·6d39·3837··-target="#idm987 | ||
| 000472c0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 000472c0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 000472d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 000472d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000472e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000472e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000472f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000472f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00047300:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00047300:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00047310:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00047310:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00047320:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00047330:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00047340:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00047350:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00047360:·2220·6964·3d22·6964·6d39·3837·3822·3e3c··"·id="idm9878">< | |||
| 00047370:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00047380:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00047390:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 000473a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 000473b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 000473c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000473d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000473e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 000473f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00047400:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00047410:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00047420:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00047 | 00047320:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 00047330:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00047340:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00047350:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00047360:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00047370:·643d·2269·646d·3938·3738·223e·3c70·7265··d="idm9878"><pre | |||
| 00047380:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00047390:·6573·5d5d·0a6e·616d·6520·3d20·2272·6561··es]].name·=·"rea | |||
| 000473a0:·7222·0a76·6572·7369·6f6e·203d·2022·2a22··r".version·=·"*" | |||
| 000473b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000473c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000473d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000473e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000473f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00047400:·743d·2223·6964·6d39·3837·3922·2074·6162··t="#idm9879"·tab | |||
| 00047410:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00047420:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00047430:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00047440:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00047450:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00047460:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00047470:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00047480:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00047490:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000474a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000474b0:·6964·6d39·3837·3922·3e3c·7461·626c·6520··idm9879"><table· | |||
| 000474c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000474d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000474e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000474f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00047500:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00047510:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00047520:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00047530:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00047540:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00047550:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00047 | 00047560:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 00047570:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00047580:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00047590:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 000475a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 000475b0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 000475c0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 000475d0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 000475e0:·7466·6f72·6d73·0a69·6620·2120·2820·2820··tforms.if·!·(·(· | |||
| 00047450:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00047460:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 00047470:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 00047480:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 00047490:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 000474a0:·2120·2820·2820·2820·6772·6570·202d·7120··!·(·(·(·grep·-q· | |||
| 000474b0:·6161·7263·6836·3420·2f70·726f·632f·7379··aarch64·/proc/sy | |||
| 000474c0:·732f·6b65·726e·656c·2f6f·7372·656c·6561··s/kernel/osrelea | |||
| 000474d0:·7365·2026·616d·703b·2661·6d70·3b20·6772··se·&&·gr | |||
| 000474e0:·6570·202d·7150·2022·5e49·443d·5b5c·2227··ep·-qP·"^ID=[\"' | |||
| 000474f0:·5d3f·6f6c·5b5c·2227·5d3f·2422·2022·2f65··]?ol[\"']?$"·"/e | |||
| 00047500:·7463·2f6f·732d·7265·6c65·6173·6522·2026··tc/os-release"·& | |||
| 00047510:·616d·703b·2661·6d70·3b20·7b20·7265·616c··amp;&·{·real | |||
| 00047520:·3d22·2428·6772·6570·202d·5020·225e·5645··="$(grep·-P·"^VE | |||
| 00047530:·5253·494f·4e5f·4944·3d5b·5c22·275d·3f5b··RSION_ID=[\"']?[ | |||
| 00047540:·5c77·2e5d·2b5b·5c22·275d·3f24·2220·2f65··\w.]+[\"']?$"·/e | |||
| 00047550:·7463·2f6f·732d·7265·6c65·6173·6520·7c20··tc/os-release·|· | |||
| 00047560:·7365·6420·2273·2f5e·5645·5253·494f·4e5f··sed·"s/^VERSION_ | |||
| 00047570:·4944·3d5b·5c22·275d·5c3f·5c28·5b5e·5c22··ID=[\"']\?\([^\" | |||
| 00047580:·275d·5c2b·5c29·5b5c·2227·5d5c·3f24·2f5c··']\+\)[\"']\?$/\ | |||
| 00047590:·312f·2229·223b·2065·7870·6563·7465·643d··1/")";·expected= | |||
| 000475a0:·2239·2e30·223b·2070·7269·6e74·6620·2225··"9.0";·printf·"% | |||
| 000475b0:·735c·6e25·7322·2022·2465·7870·6563·7465··s\n%s"·"$expecte | |||
| 000475c0:·6422·2022·2472·6561·6c22·207c·2073·6f72··d"·"$real"·|·sor | |||
| 000475d0:·7420·2d56·433b·207d·2029·207c·7c20·2820··t·-VC;·}·)·||·(· | |||
| 000475 | 000475f0:·2820·6772·6570·202d·7120·6161·7263·6836··(·grep·-q·aarch6 | ||
| 00047 | 00047600:·3420·2f70·726f·632f·7379·732f·6b65·726e··4·/proc/sys/kern | ||
| 000476 | 00047610:·656c·2f6f·7372·656c·6561·7365·2026·616d··el/osrelease·&am | ||
| 000476 | 00047620:·703b·2661·6d70·3b20·6772·6570·202d·7150··p;&·grep·-qP | ||
| 00047620 | 00047630:·2022·5e49·443d·5b5c·2227·5d3f·6f6c·5b5c···"^ID=[\"']?ol[\ | ||
| 000476 | 00047640:·2227·5d3f·2422·2022·2f65·7463·2f6f·732d··"']?$"·"/etc/os- | ||
| 000476 | 00047650:·7265·6c65·6173·6522·2026·616d·703b·2661··release"·&&a | ||
| 000476 | 00047660:·6d70·3b20·7b20·7265·616c·3d22·2428·6772··mp;·{·real="$(gr | ||
| 000476 | 00047670:·6570·202d·5020·225e·5645·5253·494f·4e5f··ep·-P·"^VERSION_ | ||
| 000476 | 00047680:·4944·3d5b·5c22·275d·3f5b·5c77·2e5d·2b5b··ID=[\"']?[\w.]+[ | ||
| 000476 | 00047690:·5c22·275d·3f24·2220·2f65·7463·2f6f·732d··\"']?$"·/etc/os- | ||
| 000476 | 000476a0:·7265·6c65·6173·6520·7c20·7365·6420·2273··release·|·sed·"s | ||
| 000476 | 000476b0:·2f5e·5645·5253·494f·4e5f·4944·3d5b·5c22··/^VERSION_ID=[\" | ||
| 000476 | 000476c0:·275d·5c3f·5c28·5b5e·5c22·275d·5c2b·5c29··']\?\([^\"']\+\) | ||
| 000476 | 000476d0:·5b5c·2227·5d5c·3f24·2f5c·312f·2229·223b··[\"']\?$/\1/")"; | ||
| 000476 | 000476e0:·2065·7870·6563·7465·643d·2239·2e30·223b···expected="9.0"; | ||
| Max diff block lines reached; 547738/585328 bytes (93.58%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:7 | 45 | ····*·cpe:/o:oracle:linux:7 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 839, 14 lines modified | Offset 839, 19 lines modified | ||
| 839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 841 | The·rear·package·can·be·installed·with·the·following·command: | 841 | The·rear·package·can·be·installed·with·the·following·command: |
| 842 | $·sudo·yum·install·rear | 842 | $·sudo·yum·install·rear |
| 843 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 843 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 844 | Severity: ·medium | 844 | Severity: ·medium |
| 845 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 845 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 847 | [[packages]] | ||
| 848 | name·=·"rear" | ||
| 849 | version·=·"*" | ||
| 846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 847 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 851 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 848 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 852 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 849 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 853 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 850 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 854 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 851 | #·Remediation·is·applicable·only·in·certain·platforms | 855 | #·Remediation·is·applicable·only·in·certain·platforms |
| 852 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 856 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 875, 38 lines modified | Offset 880, 33 lines modified | ||
| 875 | ··tags: | 880 | ··tags: |
| 876 | ··-·enable_strategy | 881 | ··-·enable_strategy |
| 877 | ··-·low_complexity | 882 | ··-·low_complexity |
| 878 | ··-·low_disruption | 883 | ··-·low_disruption |
| 879 | ··-·medium_severity | 884 | ··-·medium_severity |
| 880 | ··-·no_reboot_needed | 885 | ··-·no_reboot_needed |
| 881 | ··-·package_rear_installed | 886 | ··-·package_rear_installed |
| 882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 883 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 884 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 885 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 886 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 887 | package·--add=rear | ||
| 888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 889 | [[packages]] | ||
| 890 | name·=·"rear" | ||
| 891 | version·=·"*" | ||
| 892 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 893 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 888 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 894 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 889 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 895 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 890 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 896 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 891 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 897 | include·install_rear | 892 | include·install_rear |
| 898 | class·install_rear·{ | 893 | class·install_rear·{ |
| 899 | ··package·{·'rear': | 894 | ··package·{·'rear': |
| 900 | ····ensure·=>·'installed', | 895 | ····ensure·=>·'installed', |
| 901 | ··} | 896 | ··} |
| 902 | } | 897 | } |
| 898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 903 | package·--add=rear | ||
| 903 | Group ·Updating·Software· Group·contains·5·rules | 904 | Group ·Updating·Software· Group·contains·5·rules |
| 904 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 905 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 905 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 906 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 906 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 907 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 907 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: | 908 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: |
| Offset 1404, 38 lines modified | Offset 1404, 14 lines modified | ||
| 1404 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1404 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1405 | fi | 1405 | fi |
| 1406 | fi | 1406 | fi |
| 1407 | else | 1407 | else |
| 1408 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1408 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1409 | fi | 1409 | fi |
| 1410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1411 | --- | ||
| 1412 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1413 | kind:·MachineConfig | ||
| 1414 | spec: | ||
| 1415 | ··config: | ||
| 1416 | ····ignition: | ||
| 1417 | ······version:·3.1.0 | ||
| 1418 | ····storage: | ||
| 1419 | ······files: | ||
| 1420 | ······-·contents: | ||
| 1421 | ··········source: | ||
| 1422 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1423 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1424 | ········mode:·0644 | ||
| 1425 | ········path:·/etc/pam.d/password-auth | ||
| 1426 | ········overwrite:·true | ||
| 1427 | ······-·contents: | ||
| 1428 | ··········source: | ||
| 1429 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1430 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1431 | ········mode:·0644 | ||
| 1432 | ········path:·/etc/pam.d/system-auth | ||
| 1433 | ········overwrite:·true | ||
| 1434 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1435 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1411 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1436 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1412 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1437 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1413 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1438 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1414 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1439 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1415 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1440 | ····authselect | 1416 | ····authselect |
| Offset 1554, 14 lines modified | Offset 1530, 38 lines modified | ||
| 1554 | ··-·PCI-DSSv4-8.3.1 | 1530 | ··-·PCI-DSSv4-8.3.1 |
| 1555 | ··-·configure_strategy | 1531 | ··-·configure_strategy |
| 1556 | ··-·high_severity | 1532 | ··-·high_severity |
| 1557 | ··-·low_complexity | 1533 | ··-·low_complexity |
| 1558 | ··-·medium_disruption | 1534 | ··-·medium_disruption |
| 1559 | ··-·no_empty_passwords | 1535 | ··-·no_empty_passwords |
| Max diff block lines reached; 52099/66975 bytes (77.79%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 20365, 279 lines modified | Offset 20365, 279 lines modified | ||
| 0004f8c0:·7267·6574·3d22·2369·646d·3133·3430·3622··rget="#idm13406" | 0004f8c0:·7267·6574·3d22·2369·646d·3133·3430·3622··rget="#idm13406" | ||
| 0004f8d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0004f8d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0004f8e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0004f8e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0004f8f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0004f8f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0004f900:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0004f900:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0004f910:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0004f910:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0004f920:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0004f920:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0004f930:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0004f940:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004f950:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004f960:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004f970:·6964·3d22·6964·6d31·3334·3036·223e·3c74··id="idm13406"><t | |||
| 0004f980:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0004f990:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0004f9a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0004f9b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0004f9c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0004f9d0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0004f9e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004f9f0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004fa00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004fa10:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004fa20:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0004fa30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004fa40:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0004fa50:·7464·3e64·6973·6162·6c65·3c2f·7464·3e3c··td>disable</td>< | |||
| 0004fa60:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0004fa70:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0004fa80:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0004fa90:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0004faa0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0004fab0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0004fac0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0004fad0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0004f | 0004f930:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0004f940:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0004f950:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004f960:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004f970:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004f980:·2269·646d·3133·3430·3622·3e3c·7072·653e··"idm13406"><pre> | |||
| 0004f990:·3c63·6f64·653e·0a5b·6375·7374·6f6d·697a··<code>.[customiz | |||
| 0004f9a0:·6174·696f·6e73·2e73·6572·7669·6365·735d··ations.services] | |||
| 0004f9b0:·0a6d·6173·6b65·6420·3d20·5b22·6465·6275··.masked·=·["debu | |||
| 0004f9c0:·672d·7368·656c·6c22·5d0a·3c2f·636f·6465··g-shell"].</code | |||
| 0004f9d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004f9e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004f9f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004fa00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004fa10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004fa20:·3133·3430·3722·2074·6162·696e·6465·783d··13407"·tabindex= | |||
| 0004fa30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004fa40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004fa50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004fa60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004fa70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004fa80:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0004fa90:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0004faa0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004fab0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004fac0:·6170·7365·2220·6964·3d22·6964·6d31·3334··apse"·id="idm134 | |||
| 0004fad0:·3037·223e·3c74·6162·6c65·2063·6c61·7373··07"><table·class | |||
| 0004fae0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0004faf0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0004fb00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0004fb10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0004fb20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0004fb30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004fb40:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004fb50:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0004fb60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004fb70:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0004fb80:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0004fb90:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0004fba0:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | |||
| 0004fbb0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0004fbc0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0004fbd0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0004fbe0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0004fbf0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0004fc00:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0004fc10:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0004fc20:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0004fc30:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0004fc40:·5d3b·2074·6865·6e0a·0a53·5953·5445·4d43··];·then..SYSTEMC | |||
| 0004fc50:·544c·5f45·5845·433d·272f·7573·722f·6269··TL_EXEC='/usr/bi | |||
| 0004fc60:·6e2f·7379·7374·656d·6374·6c27·0a22·2453··n/systemctl'."$S | |||
| 0004f | 0004fc70:·5953·5445·4d43·544c·5f45·5845·4322·2073··YSTEMCTL_EXEC"·s | ||
| 0004fb00:·433d·272f·7573·722f·6269·6e2f·7379·7374··C='/usr/bin/syst | |||
| 0004fb10:·656d·6374·6c27·0a22·2453·5953·5445·4d43··emctl'."$SYSTEMC | |||
| 0004fb20:·544c·5f45·5845·4322·2073·746f·7020·2764··TL_EXEC"·stop·'d | |||
| 0004f | 0004fc80:·746f·7020·2764·6562·7567·2d73·6865·6c6c··top·'debug-shell | ||
| 0004fc90:·2e73·6572·7669·6365·270a·2224·5359·5354··.service'."$SYST | |||
| 0004fca0:·454d·4354·4c5f·4558·4543·2220·6469·7361··EMCTL_EXEC"·disa | |||
| 0004fcb0:·626c·6520·2764·6562·7567·2d73·6865·6c6c··ble·'debug-shell | |||
| 0004fcc0:·2e73·6572·7669·6365·270a·2224·5359·5354··.service'."$SYST | |||
| 0004fcd0:·454d·4354·4c5f·4558·4543·2220·6d61·736b··EMCTL_EXEC"·mask | |||
| 0004fce0:·2027·6465·6275·672d·7368·656c·6c2e·7365···'debug-shell.se | |||
| 0004fcf0:·7276·6963·6527·0a23·2044·6973·6162·6c65··rvice'.#·Disable | |||
| 0004fd00:·2073·6f63·6b65·7420·6163·7469·7661·7469···socket·activati | |||
| 0004fd10:·6f6e·2069·6620·7765·2068·6176·6520·6120··on·if·we·have·a· | |||
| 0004fd20:·756e·6974·2066·696c·6520·666f·7220·6974··unit·file·for·it | |||
| 0004f | 0004fd30:·0a69·6620·2224·5359·5354·454d·4354·4c5f··.if·"$SYSTEMCTL_ | ||
| 0004fb50:·4558·4543·2220·6469·7361·626c·6520·2764··EXEC"·disable·'d | |||
| 0004f | 0004fd40:·4558·4543·2220·2d71·206c·6973·742d·756e··EXEC"·-q·list-un | ||
| 0004fd50:·6974·2d66·696c·6573·2064·6562·7567·2d73··it-files·debug-s | |||
| 0004fd60:·6865·6c6c·2e73·6f63·6b65·743b·2074·6865··hell.socket;·the | |||
| 0004f | 0004fd70:·6e0a·2020·2020·2224·5359·5354·454d·4354··n.····"$SYSTEMCT | ||
| 0004fd80:·4c5f·4558·4543·2220·7374·6f70·2027·6465··L_EXEC"·stop·'de | |||
| 0004fd90:·6275·672d·7368·656c·6c2e·736f·636b·6574··bug-shell.socket | |||
| 0004fda0:·270a·2020·2020·2224·5359·5354·454d·4354··'.····"$SYSTEMCT | |||
| 0004f | 0004fdb0:·4c5f·4558·4543·2220·6d61·736b·2027·6465··L_EXEC"·mask·'de | ||
| Max diff block lines reached; 680804/719084 bytes (94.68%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:7 | 50 | ····*·cpe:/o:oracle:linux:7 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1202, 14 lines modified | Offset 1202, 18 lines modified | ||
| 1202 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1202 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1203 | ············_\x8c_\x8u_\x8i····3.4.5 | 1203 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1204 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1204 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1205 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1205 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1206 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1206 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1207 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1207 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1210 | [customizations.services] | ||
| 1211 | masked·=·["debug-shell"] | ||
| 1209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1214 | #·Remediation·is·applicable·only·in·certain·platforms | 1217 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1215 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1304, 18 lines modified | Offset 1308, 14 lines modified | ||
| 1304 | ··-·NIST-800-53-CM-6 | 1308 | ··-·NIST-800-53-CM-6 |
| 1305 | ··-·disable_strategy | 1309 | ··-·disable_strategy |
| 1306 | ··-·low_complexity | 1310 | ··-·low_complexity |
| 1307 | ··-·low_disruption | 1311 | ··-·low_disruption |
| 1308 | ··-·medium_severity | 1312 | ··-·medium_severity |
| 1309 | ··-·no_reboot_needed | 1313 | ··-·no_reboot_needed |
| 1310 | ··-·service_debug-shell_disabled | 1314 | ··-·service_debug-shell_disabled |
| 1311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1312 | [customizations.services] | ||
| 1313 | masked·=·["debug-shell"] | ||
| 1314 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1315 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1315 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1316 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1316 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1317 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1317 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1318 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1318 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1319 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1319 | include·disable_debug-shell | 1320 | include·disable_debug-shell |
| Offset 1760, 38 lines modified | Offset 1760, 14 lines modified | ||
| 1760 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1760 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1761 | fi | 1761 | fi |
| 1762 | fi | 1762 | fi |
| 1763 | else | 1763 | else |
| 1764 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1764 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1765 | fi | 1765 | fi |
| 1766 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1767 | --- | ||
| 1768 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1769 | kind:·MachineConfig | ||
| 1770 | spec: | ||
| 1771 | ··config: | ||
| 1772 | ····ignition: | ||
| 1773 | ······version:·3.1.0 | ||
| 1774 | ····storage: | ||
| 1775 | ······files: | ||
| 1776 | ······-·contents: | ||
| 1777 | ··········source: | ||
| 1778 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1779 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1780 | ········mode:·0644 | ||
| 1781 | ········path:·/etc/pam.d/password-auth | ||
| 1782 | ········overwrite:·true | ||
| 1783 | ······-·contents: | ||
| 1784 | ··········source: | ||
| 1785 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1786 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1787 | ········mode:·0644 | ||
| 1788 | ········path:·/etc/pam.d/system-auth | ||
| 1789 | ········overwrite:·true | ||
| 1790 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1766 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1791 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1767 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1792 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1768 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1793 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1769 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1794 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1770 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1795 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1771 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1796 | ····authselect | 1772 | ····authselect |
| Offset 1910, 14 lines modified | Offset 1886, 38 lines modified | ||
| 1910 | ··-·PCI-DSSv4-8.3.1 | 1886 | ··-·PCI-DSSv4-8.3.1 |
| 1911 | ··-·configure_strategy | 1887 | ··-·configure_strategy |
| 1912 | ··-·high_severity | 1888 | ··-·high_severity |
| 1913 | ··-·low_complexity | 1889 | ··-·low_complexity |
| 1914 | ··-·medium_disruption | 1890 | ··-·medium_disruption |
| 1915 | ··-·no_empty_passwords | 1891 | ··-·no_empty_passwords |
| 1916 | ··-·no_reboot_needed | 1892 | ··-·no_reboot_needed |
| 1893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1894 | --- | ||
| 1895 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1896 | kind:·MachineConfig | ||
| 1897 | spec: | ||
| 1898 | ··config: | ||
| 1899 | ····ignition: | ||
| 1900 | ······version:·3.1.0 | ||
| 1901 | ····storage: | ||
| 1902 | ······files: | ||
| 1903 | ······-·contents: | ||
| 1904 | ··········source: | ||
| 1905 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1906 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1907 | ········mode:·0644 | ||
| 1908 | ········path:·/etc/pam.d/password-auth | ||
| 1909 | ········overwrite:·true | ||
| 1910 | ······-·contents: | ||
| 1911 | ··········source: | ||
| 1912 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1913 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1914 | ········mode:·0644 | ||
| 1915 | ········path:·/etc/pam.d/system-auth | ||
| 1916 | ········overwrite:·true | ||
| 1917 | Group ·Restrict·Root·Logins· Group·contains·3·rules | 1917 | Group ·Restrict·Root·Logins· Group·contains·3·rules |
| 1918 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. | 1918 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. |
| 1919 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1919 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 47114/70150 bytes (67.16%) of diff not shown. | |||
| Offset 14368, 15 lines modified | Offset 14368, 15 lines modified | ||
| 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038260:·206f·6620·3230·323 | 00038260:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16570, 203 lines modified | Offset 16570, 203 lines modified | ||
| 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00040ba0:·6964·6d35·3634·3122·2074·6162·696e·6465··idm5641"·tabinde | 00040ba0:·6964·6d35·3634·3122·2074·6162·696e·6465··idm5641"·tabinde | ||
| 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00040c00:·656d·6564·6961·7469·6f6e·20 | 00040c00:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 00040c10:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 00040c10:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00040c20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040c30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040c40:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 00040c50:·3634·3122·3e3c·7461·626c·6520·636c·6173··641"><table·clas | |||
| 00040c60:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00040c70:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00040c80:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00040c90:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00040ca0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00040cb0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040cc0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00040cd0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00040ce0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040cf0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00040d00:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00040d10:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00040d20:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00040d30:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00040d40:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 00040d50:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 00040d60:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 00040d70:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 00040d80:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 00040d90:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 00040da0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 00040db0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 00040dc0:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 00040dd0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 00040de0:·6465·2220·3b20·7468·656e·0a20·2020·2079··de"·;·then.····y | |||
| 00040df0:·756d·2069·6e73·7461·6c6c·202d·7920·2261··um·install·-y·"a | |||
| 00040e00:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 00040e10:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 00040e20:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 00040e30:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 00040e40:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 00040e50:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 00040e60:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00040e70:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00040e80:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00040e90:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00040ea0:·2d74·6172·6765·743d·2223·6964·6d35·3634··-target="#idm564 | |||
| 00040eb0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 00040ec0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00040ed0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00040ee0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00040ef0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00040f00:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00040f10:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00040 | 00040c20:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 00040 | 00040c30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 00040 | 00040c40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 00040 | 00040c50:·7073·6522·2069·643d·2269·646d·3536·3431··pse"·id="idm5641 | ||
| 00040c60:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 00040c70:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00040c80:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 00040c90:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 00040f60:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040f70:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040f80:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040f90:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040fa0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040fb0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040fc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040fd0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00040fe0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040ff0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00041000:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00041010:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00041020:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00041030:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00041040:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041050:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00041060:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 00041070:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00041080:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00041090:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 000410a0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 000410b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000410c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000410d0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000410e0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000410f0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00041100:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00041110:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 00041120:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | |||
| 00041130:·3037·2d30·302d·3032·3030·3239·0a20·202d··07-00-020029.··- | |||
| 00041140:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 00041150:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 00041160:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 00041170:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 00041180:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00041190:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 000411a0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 000411b0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 000411c0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 000411d0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 000411e0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 000411f0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 00041200:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00041210:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00041220:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| Max diff block lines reached; 1181041/1208833 bytes (97.70%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·National·Checklist·Program·Security·Guide | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·National·Checklist·Program·Security·Guide |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ncp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ncp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:oracle:linux:7 | 62 | ····*·cpe:/o:oracle:linux:7 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 451, 14 lines modified | Offset 451, 19 lines modified | ||
| 451 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 451 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 452 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 452 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 453 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 453 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 454 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 454 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 455 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 455 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 456 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 456 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 457 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 457 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 459 | [[packages]] | ||
| 460 | name·=·"aide" | ||
| 461 | version·=·"*" | ||
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 463 | #·Remediation·is·applicable·only·in·certain·platforms | 467 | #·Remediation·is·applicable·only·in·certain·platforms |
| 464 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 468 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 488, 38 lines modified | Offset 493, 33 lines modified | ||
| 488 | ··-·PCI-DSSv4-11.5.2 | 493 | ··-·PCI-DSSv4-11.5.2 |
| 489 | ··-·enable_strategy | 494 | ··-·enable_strategy |
| 490 | ··-·low_complexity | 495 | ··-·low_complexity |
| 491 | ··-·low_disruption | 496 | ··-·low_disruption |
| 492 | ··-·medium_severity | 497 | ··-·medium_severity |
| 493 | ··-·no_reboot_needed | 498 | ··-·no_reboot_needed |
| 494 | ··-·package_aide_installed | 499 | ··-·package_aide_installed |
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 500 | package·--add=aide | ||
| 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 502 | [[packages]] | ||
| 503 | name·=·"aide" | ||
| 504 | version·=·"*" | ||
| 505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 510 | include·install_aide | 505 | include·install_aide |
| 511 | class·install_aide·{ | 506 | class·install_aide·{ |
| 512 | ··package·{·'aide': | 507 | ··package·{·'aide': |
| 513 | ····ensure·=>·'installed', | 508 | ····ensure·=>·'installed', |
| 514 | ··} | 509 | ··} |
| 515 | } | 510 | } |
| 511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 516 | package·--add=aide | ||
| 516 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 517 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 517 | Run·the·following·command·to·generate·a·new·database: | 518 | Run·the·following·command·to·generate·a·new·database: |
| 518 | $·sudo·/usr/sbin/aide·--init | 519 | $·sudo·/usr/sbin/aide·--init |
| 519 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 520 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 520 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 521 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 521 | To·initiate·a·manual·check,·run·the·following·command: | 522 | To·initiate·a·manual·check,·run·the·following·command: |
| 522 | $·sudo·/usr/sbin/aide·--check | 523 | $·sudo·/usr/sbin/aide·--check |
| Offset 1200, 14 lines modified | Offset 1200, 19 lines modified | ||
| 1200 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 1200 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 1201 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1201 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 1206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 1207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1208 | [[packages]] | ||
| 1209 | name·=·"dracut-fips" | ||
| 1210 | version·=·"*" | ||
| 1207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1212 | #·Remediation·is·applicable·only·in·certain·platforms | 1216 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1213 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1217 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 1244, 38 lines modified | Offset 1249, 33 lines modified | ||
| 1244 | ··-·NIST-800-53-SC-13 | 1249 | ··-·NIST-800-53-SC-13 |
| 1245 | ··-·enable_strategy | 1250 | ··-·enable_strategy |
| 1246 | ··-·low_complexity | 1251 | ··-·low_complexity |
| 1247 | ··-·low_disruption | 1252 | ··-·low_disruption |
| 1248 | ··-·medium_severity | 1253 | ··-·medium_severity |
| 1249 | ··-·no_reboot_needed | 1254 | ··-·no_reboot_needed |
| 1250 | ··-·package_dracut-fips_installed | 1255 | ··-·package_dracut-fips_installed |
| 1251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1252 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1253 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1254 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1255 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1256 | package·--add=dracut-fips | ||
| 1257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1258 | [[packages]] | ||
| 1259 | name·=·"dracut-fips" | ||
| 1260 | version·=·"*" | ||
| 1261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1262 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1257 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1263 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1258 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1264 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1259 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1265 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1260 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1266 | include·install_dracut-fips | 1261 | include·install_dracut-fips |
| Max diff block lines reached; 100059/106385 bytes (94.05%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 232 lines modified | Offset 15048, 232 lines modified | ||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003acf0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ad00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003acf0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad30:·646d·3631·3732·223e·3c74·6162·6c65·2063··dm6172"><table·c | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003adb0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003adc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae00:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ae10:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003a | 0003ad40:·3137·3222·3e3c·7072·653e·3c63·6f64·653e··172"><pre><code> | ||
| 0003ad50:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae30:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003ae40:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003ae50:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003ae60:·666f·726d·730a·6966·2028·205b·2021·202d··forms.if·(·[·!·- | |||
| 0003ae70:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003ae80:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003ae90:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003aea0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003aeb0:·3b20·2120·2820·5b20·2224·7b63·6f6e·7461··;·!·(·[·"${conta | |||
| 0003aec0:·696e·6572·3a2d·7d22·203d·3d20·2262·7772··iner:-}"·==·"bwr | |||
| 0003aed0:·6170·2d6f·7362·7569·6c64·2220·5d20·2920··ap-osbuild"·]·)· | |||
| 0003aee0:·2920·2661·6d70·3b26·616d·703b·207b·205b··)·&&·{·[ | |||
| 0003aef0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003af00:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003af10:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003af20:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | |||
| 0003af30:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003af40:·202d·2d71·7569·6574·2022·6472·6163·7574···--quiet·"dracut | |||
| 0003af50:·2d66·6970·7322·203b·2074·6865·6e0a·2020··-fips"·;·then.·· | |||
| 0003af60:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003a | 0003ad60:·6d65·203d·2022·6472·6163·7574·2d66·6970··me·=·"dracut-fip | ||
| 0003ad70:·7322·0a76·6572·7369·6f6e·203d·2022·2a22··s".version·=·"*" | |||
| 0003af80:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003af90:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003afa0:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003afb0:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003afc0:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003a | 0003ad80:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003a | 0003ad90:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003a | 0003ada0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003 | 0003adb0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003 | 0003adc0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003 | 0003add0:·743d·2223·6964·6d36·3137·3322·2074·6162··t="#idm6173"·tab | ||
| 0003 | 0003ade0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003 | 0003adf0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003 | 0003ae00:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003 | 0003ae10:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003 | 0003ae20:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003 | 0003ae30:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003b090:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b0a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b0b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b0c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b0d0:·643d·2269·646d·3631·3733·223e·3c74·6162··d="idm6173"><tab | |||
| 0003b0e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b0f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b100:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b110:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b120:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b130:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b140:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003 | 0003ae40:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003ae50:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ae60:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ae70:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ae80:·6964·6d36·3137·3322·3e3c·7461·626c·6520··idm6173"><table· | |||
| 0003ae90:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003aea0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003aeb0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003aec0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003aed0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aee0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003aef0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003af00:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003af10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003af30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003af40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003af50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003 | 0003af60:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b170:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b180:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b190:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b1a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b1b0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b1c0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003 | 0003af70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| Max diff block lines reached; 629532/661326 bytes (95.19%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 92, 14 lines modified | Offset 92, 19 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"dracut-fips" | ||
| 102 | version·=·"*" | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | #·Remediation·is·applicable·only·in·certain·platforms | 108 | #·Remediation·is·applicable·only·in·certain·platforms |
| 105 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 109 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 136, 38 lines modified | Offset 141, 33 lines modified | ||
| 136 | ··-·NIST-800-53-SC-13 | 141 | ··-·NIST-800-53-SC-13 |
| 137 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 138 | ··-·low_complexity | 143 | ··-·low_complexity |
| 139 | ··-·low_disruption | 144 | ··-·low_disruption |
| 140 | ··-·medium_severity | 145 | ··-·medium_severity |
| 141 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 142 | ··-·package_dracut-fips_installed | 147 | ··-·package_dracut-fips_installed |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=dracut-fips | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | [[packages]] | ||
| 151 | name·=·"dracut-fips" | ||
| 152 | version·=·"*" | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | include·install_dracut-fips | 153 | include·install_dracut-fips |
| 159 | class·install_dracut-fips·{ | 154 | class·install_dracut-fips·{ |
| 160 | ··package·{·'dracut-fips': | 155 | ··package·{·'dracut-fips': |
| 161 | ····ensure·=>·'installed', | 156 | ····ensure·=>·'installed', |
| 162 | ··} | 157 | ··} |
| 163 | } | 158 | } |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·--add=dracut-fips | ||
| 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 165 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 166 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 166 | $·sudo·yum·install·dracut-fips | 167 | $·sudo·yum·install·dracut-fips |
| 167 | dracut·-f | 168 | dracut·-f |
| 168 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 169 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 169 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 170 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 170 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 171 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 7522, 14 lines modified | Offset 7522, 19 lines modified | ||
| 7522 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 7522 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 7523 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 7523 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 7524 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 7524 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 7525 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 7525 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 7526 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 7526 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 7527 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 7527 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| 7528 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule | 7528 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule |
| 7529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7530 | [[packages]] | ||
| 7531 | name·=·"screen" | ||
| 7532 | version·=·"*" | ||
| 7529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7533 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7534 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7535 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7536 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7537 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7534 | #·Remediation·is·applicable·only·in·certain·platforms | 7538 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7535 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7539 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7557, 52 lines modified | Offset 7562, 51 lines modified | ||
| 7557 | ··-·NIST-800-53-CM-6(a) | 7562 | ··-·NIST-800-53-CM-6(a) |
| 7558 | ··-·enable_strategy | 7563 | ··-·enable_strategy |
| 7559 | ··-·low_complexity | 7564 | ··-·low_complexity |
| 7560 | ··-·low_disruption | 7565 | ··-·low_disruption |
| 7561 | ··-·medium_severity | 7566 | ··-·medium_severity |
| 7562 | ··-·no_reboot_needed | 7567 | ··-·no_reboot_needed |
| 7563 | ··-·package_screen_installed | 7568 | ··-·package_screen_installed |
| 7564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 7569 | package·--add=screen | ||
| 7570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7571 | [[packages]] | ||
| 7572 | name·=·"screen" | ||
| 7573 | version·=·"*" | ||
| 7574 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7575 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7576 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7577 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7572 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7578 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7573 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7579 | include·install_screen | 7574 | include·install_screen |
| Max diff block lines reached; 50175/56482 bytes (88.83%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037cf0:·3230·323 | 00037cf0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16436, 202 lines modified | Offset 16436, 202 lines modified | ||
| 00040330:·6574·3d22·2369·646d·3536·3431·2220·7461··et="#idm5641"·ta | 00040330:·6574·3d22·2369·646d·3536·3431·2220·7461··et="#idm5641"·ta | ||
| 00040340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00040340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00040350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00040350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00040360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00040360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00040370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00040370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00040380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00040380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00040390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00040390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000403a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000403a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 000403b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000403c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000403d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000403e0:·2269·646d·3536·3431·223e·3c74·6162·6c65··"idm5641"><table | |||
| 000403f0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00040400:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040410:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040420:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040430:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040440:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040450:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040460:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040470:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040480:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040490:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 000404a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 000404b0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 000404c0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 000404d0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 000404e0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 000404f0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 00040500:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 00040510:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 00040520:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 00040530:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 00040540:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 00040550:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 00040560:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 00040570:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 00040580:·2020·2020·7975·6d20·696e·7374·616c·6c20······yum·install· | |||
| 00040590:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 000405a0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 000405b0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 000405c0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 000405d0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 000405e0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 000405f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00040600:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 00040610:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00040620:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00040630:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00040640:·646d·3536·3432·2220·7461·6269·6e64·6578··dm5642"·tabindex | |||
| 00040650:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00040660:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00040670:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00040680:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00040690:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 000406a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 00040 | 000403b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 00040 | 000403c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00040 | 000403d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00040 | 000403e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 000403f0:·6d35·3634·3122·3e3c·7072·653e·3c63·6f64··m5641"><pre><cod | |||
| 00040400:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 00040410:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 00040420:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 000406f0:·6d35·3634·3222·3e3c·7461·626c·6520·636c··m5642"><table·cl | |||
| 00040700:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00040710:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00040720:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00040730:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00040740:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00040750:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040760:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00040770:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00040780:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040790:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000407a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000407b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 000407c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000407d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 000407e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 000407f0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 00040800:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 00040810:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 00040820:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 00040830:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 00040840:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00040850:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00040860:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00040870:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00040880:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00040890:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 000408a0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 000408b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 000408c0:·4947·2d4f·4c30·372d·3030·2d30·3230·3032··IG-OL07-00-02002 | |||
| 000408d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 000408e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 000408f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 00040900:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 00040910:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 00040920:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00040930:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00040940:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00040950:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00040960:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 00040970:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 00040980:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 00040990:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 000409a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000409b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 000409c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 231128/258782 bytes (89.31%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 421, 14 lines modified | Offset 421, 19 lines modified | ||
| 421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 422 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 422 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 423 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 423 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 424 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 424 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 425 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 425 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 426 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 426 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 427 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 427 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 429 | [[packages]] | ||
| 430 | name·=·"aide" | ||
| 431 | version·=·"*" | ||
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 433 | #·Remediation·is·applicable·only·in·certain·platforms | 437 | #·Remediation·is·applicable·only·in·certain·platforms |
| 434 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 438 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 458, 38 lines modified | Offset 463, 33 lines modified | ||
| 458 | ··-·PCI-DSSv4-11.5.2 | 463 | ··-·PCI-DSSv4-11.5.2 |
| 459 | ··-·enable_strategy | 464 | ··-·enable_strategy |
| 460 | ··-·low_complexity | 465 | ··-·low_complexity |
| 461 | ··-·low_disruption | 466 | ··-·low_disruption |
| 462 | ··-·medium_severity | 467 | ··-·medium_severity |
| 463 | ··-·no_reboot_needed | 468 | ··-·no_reboot_needed |
| 464 | ··-·package_aide_installed | 469 | ··-·package_aide_installed |
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 470 | package·--add=aide | ||
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 472 | [[packages]] | ||
| 473 | name·=·"aide" | ||
| 474 | version·=·"*" | ||
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 480 | include·install_aide | 475 | include·install_aide |
| 481 | class·install_aide·{ | 476 | class·install_aide·{ |
| 482 | ··package·{·'aide': | 477 | ··package·{·'aide': |
| 483 | ····ensure·=>·'installed', | 478 | ····ensure·=>·'installed', |
| 484 | ··} | 479 | ··} |
| 485 | } | 480 | } |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 486 | package·--add=aide | ||
| 486 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 487 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 487 | Run·the·following·command·to·generate·a·new·database: | 488 | Run·the·following·command·to·generate·a·new·database: |
| 488 | $·sudo·/usr/sbin/aide·--init | 489 | $·sudo·/usr/sbin/aide·--init |
| 489 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 490 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 490 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 491 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 491 | To·initiate·a·manual·check,·run·the·following·command: | 492 | To·initiate·a·manual·check,·run·the·following·command: |
| 492 | $·sudo·/usr/sbin/aide·--check | 493 | $·sudo·/usr/sbin/aide·--check |
| Offset 8386, 38 lines modified | Offset 8386, 14 lines modified | ||
| 8386 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 8386 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 8387 | fi | 8387 | fi |
| 8388 | fi | 8388 | fi |
| 8389 | else | 8389 | else |
| 8390 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8390 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8391 | fi | 8391 | fi |
| 8392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8393 | --- | ||
| 8394 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 8395 | kind:·MachineConfig | ||
| 8396 | spec: | ||
| 8397 | ··config: | ||
| 8398 | ····ignition: | ||
| 8399 | ······version:·3.1.0 | ||
| 8400 | ····storage: | ||
| 8401 | ······files: | ||
| 8402 | ······-·contents: | ||
| 8403 | ··········source: | ||
| 8404 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 8405 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 8406 | ········mode:·0644 | ||
| 8407 | ········path:·/etc/pam.d/password-auth | ||
| 8408 | ········overwrite:·true | ||
| 8409 | ······-·contents: | ||
| 8410 | ··········source: | ||
| 8411 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 8412 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 8413 | ········mode:·0644 | ||
| 8414 | ········path:·/etc/pam.d/system-auth | ||
| 8415 | ········overwrite:·true | ||
| 8416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 8394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 8419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 8396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 8421 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 8397 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 8422 | ····authselect | 8398 | ····authselect |
| Offset 8536, 14 lines modified | Offset 8512, 38 lines modified | ||
| 8536 | ··-·PCI-DSSv4-8.3.1 | 8512 | ··-·PCI-DSSv4-8.3.1 |
| 8537 | ··-·configure_strategy | 8513 | ··-·configure_strategy |
| 8538 | ··-·high_severity | 8514 | ··-·high_severity |
| 8539 | ··-·low_complexity | 8515 | ··-·low_complexity |
| 8540 | ··-·medium_disruption | 8516 | ··-·medium_disruption |
| 8541 | ··-·no_empty_passwords | 8517 | ··-·no_empty_passwords |
| Max diff block lines reached; 19826/33345 bytes (59.46%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d70:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d70:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d80:·3 | 00037d80:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 00039410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039440:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039450:·3d22·6964·6d39·3033·3322·3e3c·7072·653e··="idm9033"><pre> | |||
| 00039400:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 00039410:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039420:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039430:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039440:·2069·643d·2269·646d·3930·3333·223e·3c74···id="idm9033"><t | |||
| 00039450:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00039460:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00039470:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00039480:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00039490:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000394a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000394b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000394c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000394d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000394e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000394f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00039500:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039510:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00039520:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00039530:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039540:·3c63·6f64·653e·0a69·6620·2120·7270·6d20··<code>.if·!·rpm· | |||
| 00039550:·2d71·202d·2d71·7569·6574·2022·676c·6962··-q·--quiet·"glib | |||
| 00039560:·6322·203b·2074·6865·6e0a·2020·2020·7975··c"·;·then.····yu | |||
| 00039570:·6d20·696e·7374·616c·6c20·2d79·2022·676c··m·install·-y·"gl | |||
| 00039580:·6962·6322·0a66·690a·3c2f·636f·6465·3e3c··ibc".fi.</code>< | |||
| 00039590:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000395a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000395b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000395c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000395d0:·612d·7461·7267·6574·3d22·2369·646d·3930··a-target="#idm90 | |||
| 000395e0:·3334·2220·7461·6269·6e64·6578·3d22·3022··34"·tabindex="0" | |||
| 000395f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039600:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039610:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039620:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00039630:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039640:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00039650:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00039660:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00039670:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00039680:·6170·7365·2220·6964·3d22·6964·6d39·3033··apse"·id="idm903 | |||
| 00039690:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 000396a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000396b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000396c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 000396d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 000396e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 000396f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039700:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00039710:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039720:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00039730:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00039740:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00039750:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00039760:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00039770:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039780:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00039790:·653a·2045·6e73·7572·6520·676c·6962·6320··e:·Ensure·glibc· | |||
| 000397a0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 000397b0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 000397c0:·3a20·676c·6962·630a·2020·2020·7374·6174··:·glibc.····stat | |||
| 000397d0:·653a·2070·7265·7365·6e74·0a20·2074·6167··e:·present.··tag | |||
| 000397e0:·733a·0a20·202d·2065·6e61·626c·655f·7374··s:.··-·enable_st | |||
| 000397f0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00039800:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00039810:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00039820:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00039830:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00039840:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 00039850:·655f·676c·6962·635f·696e·7374·616c·6c65··e_glibc_installe | |||
| 00039860:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00039870:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039880:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039890:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 000398a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 000398b0:·6574·3d22·2369·646d·3930·3335·2220·7461··et="#idm9035"·ta | |||
| 000398c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000398d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000398e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000398f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00039900:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00039910:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00039920:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 00039930:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039940:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039950:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039960:·2069·643d·2269·646d·3930·3335·223e·3c74···id="idm9035"><t | |||
| 00039970:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00039980:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00039990:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 000399a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000399b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000399c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000399d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000399e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000399f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039a00:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| Max diff block lines reached; 121852/146194 bytes (83.35%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:oracle:linux:7 | 43 | ····*·cpe:/o:oracle:linux:7 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 64, 14 lines modified | Offset 64, 19 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | [[packages]] | ||
| 73 | name·=·"glibc" | ||
| 74 | version·=·"*" | ||
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 75 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 76 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 77 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 78 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 79 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 76 | if·!·rpm·-q·--quiet·"glibc"·;·then | 80 | if·!·rpm·-q·--quiet·"glibc"·;·then |
| Offset 89, 46 lines modified | Offset 94, 46 lines modified | ||
| 89 | ··tags: | 94 | ··tags: |
| 90 | ··-·enable_strategy | 95 | ··-·enable_strategy |
| 91 | ··-·low_complexity | 96 | ··-·low_complexity |
| 92 | ··-·low_disruption | 97 | ··-·low_disruption |
| 93 | ··-·medium_severity | 98 | ··-·medium_severity |
| 94 | ··-·no_reboot_needed | 99 | ··-·no_reboot_needed |
| 95 | ··-·package_glibc_installed | 100 | ··-·package_glibc_installed |
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 101 | package·--add=glibc | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 103 | [[packages]] | ||
| 104 | name·=·"glibc" | ||
| 105 | version·=·"*" | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | include·install_glibc | 106 | include·install_glibc |
| 112 | class·install_glibc·{ | 107 | class·install_glibc·{ |
| 113 | ··package·{·'glibc': | 108 | ··package·{·'glibc': |
| 114 | ····ensure·=>·'installed', | 109 | ····ensure·=>·'installed', |
| 115 | ··} | 110 | ··} |
| 116 | } | 111 | } |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=glibc | ||
| 117 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 118 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 118 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | 119 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated |
| 119 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | 120 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information |
| 120 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | 121 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: |
| 121 | $·sudo·yum·install·uuidd | 122 | $·sudo·yum·install·uuidd |
| 122 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | 123 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. |
| 123 | Severity: ·medium | 124 | Severity: ·medium |
| 124 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | 125 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"uuidd" | ||
| 129 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | if·!·rpm·-q·--quiet·"uuidd"·;·then | 135 | if·!·rpm·-q·--quiet·"uuidd"·;·then |
| Offset 146, 38 lines modified | Offset 151, 33 lines modified | ||
| 146 | ··tags: | 151 | ··tags: |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_uuidd_installed | 157 | ··-·package_uuidd_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=uuidd | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"uuidd" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | include·install_uuidd | 163 | include·install_uuidd |
| 169 | class·install_uuidd·{ | 164 | class·install_uuidd·{ |
| 170 | ··package·{·'uuidd': | 165 | ··package·{·'uuidd': |
| 171 | ····ensure·=>·'installed', | 166 | ····ensure·=>·'installed', |
| 172 | ··} | 167 | ··} |
| 173 | } | 168 | } |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 8412/14489 bytes (58.06%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d40:·2d3 | 00037d40:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 19165, 828 lines modified | Offset 19165, 828 lines modified | ||
| 0004adc0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0004adc0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0004add0:·3538·3931·2220·7461·6269·6e64·6578·3d22··5891"·tabindex=" | 0004add0:·3538·3931·2220·7461·6269·6e64·6578·3d22··5891"·tabindex=" | ||
| 0004ade0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0004ade0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0004adf0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0004adf0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0004ae00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0004ae00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0004ae10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0004ae10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0004ae20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0004ae20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0004ae30:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0004ae40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0004ae50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0004ae60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0004ae70:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0004ae80:·3538·3931·223e·3c74·6162·6c65·2063·6c61··5891"><table·cla | |||
| 0004ae90:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0004aea0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0004aeb0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0004aec0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0004aed0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0004aee0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004aef0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004af00:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0004af10:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | |||
| 0004af20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004af30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004af40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004af50:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | |||
| 0004af60:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | |||
| 0004af70:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004af80:·6f64·653e·2d20·6e61·6d65·3a20·5072·6576··ode>-·name:·Prev | |||
| 0004af90:·656e·7420·4c6f·6769·6e20·746f·2041·6363··ent·Login·to·Acc | |||
| 0004afa0:·6f75·6e74·7320·5769·7468·2045·6d70·7479··ounts·With·Empty | |||
| 0004afb0:·2050·6173·7377·6f72·6420·2d20·4368·6563···Password·-·Chec | |||
| 0004afc0:·6b20·6966·2073·7973·7465·6d20·7265·6c69··k·if·system·reli | |||
| 0004afd0:·6573·206f·6e0a·2020·2020·6175·7468·7365··es·on.····authse | |||
| 0004afe0:·6c65·6374·0a20·2061·6e73·6962·6c65·2e62··lect.··ansible.b | |||
| 0004aff0:·7569·6c74·696e·2e73·7461·743a·0a20·2020··uiltin.stat:.··· | |||
| 0004b000:·2070·6174·683a·202f·7573·722f·6269·6e2f···path:·/usr/bin/ | |||
| 0004b010:·6175·7468·7365·6c65·6374·0a20·2072·6567··authselect.··reg | |||
| 0004b020:·6973·7465·723a·2072·6573·756c·745f·6175··ister:·result_au | |||
| 0004b030:·7468·7365·6c65·6374·5f70·7265·7365·6e74··thselect_present | |||
| 0004b040:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0004b050:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0004b060:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0004b070:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0004b080:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0004b090:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0004b0a0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0004b0b0:·352e·352e·320a·2020·2d20·4449·5341·2d53··5.5.2.··-·DISA-S | |||
| 0004b0c0:·5449·472d·4f4c·3037·2d30·302d·3031·3032··TIG-OL07-00-0102 | |||
| 0004b0d0:·3930·0a20·202d·204e·4953·542d·3830·302d··90.··-·NIST-800- | |||
| 0004b0e0:·3137·312d·332e·312e·310a·2020·2d20·4e49··171-3.1.1.··-·NI | |||
| 0004b0f0:·5354·2d38·3030·2d31·3731·2d33·2e31·2e35··ST-800-171-3.1.5 | |||
| 0004b100:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004b110:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0004b120:·542d·3830·302d·3533·2d49·412d·3528·3129··T-800-53-IA-5(1) | |||
| 0004b130:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0004b140:·2d35·332d·4941·2d35·2863·290a·2020·2d20··-53-IA-5(c).··-· | |||
| 0004b150:·5043·492d·4453·532d·5265·712d·382e·322e··PCI-DSS-Req-8.2. | |||
| 0004b160:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | |||
| 0004b170:·382e·332e·310a·2020·2d20·636f·6e66·6967··8.3.1.··-·config | |||
| 0004b180:·7572·655f·7374·7261·7465·6779·0a20·202d··ure_strategy.··- | |||
| 0004b190:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0004b1a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0004b1b0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | |||
| 0004b1c0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f65··ruption.··-·no_e | |||
| 0004b1d0:·6d70·7479·5f70·6173·7377·6f72·6473·0a20··mpty_passwords.· | |||
| 0004b1e0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0004b1f0:·6465·640a·0a2d·206e·616d·653a·2050·7265··ded..-·name:·Pre | |||
| 0004b200:·7665·6e74·204c·6f67·696e·2074·6f20·4163··vent·Login·to·Ac | |||
| 0004b210:·636f·756e·7473·2057·6974·6820·456d·7074··counts·With·Empt | |||
| 0004b220:·7920·5061·7373·776f·7264·202d·2052·656d··y·Password·-·Rem | |||
| 0004b230:·6564·6961·7465·2075·7369·6e67·2061·7574··ediate·using·aut | |||
| 0004b240:·6873·656c·6563·740a·2020·626c·6f63·6b3a··hselect.··block: | |||
| 0004b250:·0a0a·2020·2d20·6e61·6d65·3a20·5072·6576··..··-·name:·Prev | |||
| 0004b260:·656e·7420·4c6f·6769·6e20·746f·2041·6363··ent·Login·to·Acc | |||
| 0004b270:·6f75·6e74·7320·5769·7468·2045·6d70·7479··ounts·With·Empty | |||
| 0004b280:·2050·6173·7377·6f72·6420·2d20·4368·6563···Password·-·Chec | |||
| 0004b290:·6b20·696e·7465·6772·6974·7920·6f66·2061··k·integrity·of·a | |||
| 0004b2a0:·7574·6873·656c·6563·740a·2020·2020·2020··uthselect.······ | |||
| 0004b2b0:·6375·7272·656e·7420·7072·6f66·696c·650a··current·profile. | |||
| 0004b2c0:·2020·2020·616e·7369·626c·652e·6275·696c······ansible.buil | |||
| 0004b2d0:·7469·6e2e·636f·6d6d·616e·643a·0a20·2020··tin.command:.··· | |||
| 0004b2e0:·2020·2063·6d64·3a20·6175·7468·7365·6c65·····cmd:·authsele | |||
| 0004b2f0:·6374·2063·6865·636b·0a20·2020·2072·6567··ct·check.····reg | |||
| 0004b300:·6973·7465·723a·2072·6573·756c·745f·6175··ister:·result_au | |||
| 0004b310:·7468·7365·6c65·6374·5f63·6865·636b·5f63··thselect_check_c | |||
| 0004b320:·6d64·0a20·2020·2063·6861·6e67·6564·5f77··md.····changed_w | |||
| 0004b330:·6865·6e3a·2066·616c·7365·0a20·2020·2066··hen:·false.····f | |||
| 0004b340:·6169·6c65·645f·7768·656e·3a20·6661·6c73··ailed_when:·fals | |||
| 0004b350:·650a·0a20·202d·206e·616d·653a·2050·7265··e..··-·name:·Pre | |||
| 0004b360:·7665·6e74·204c·6f67·696e·2074·6f20·4163··vent·Login·to·Ac | |||
| 0004b370:·636f·756e·7473·2057·6974·6820·456d·7074··counts·With·Empt | |||
| 0004b380:·7920·5061·7373·776f·7264·202d·2049·6e66··y·Password·-·Inf | |||
| 0004b390:·6f72·6d61·7469·7665·206d·6573·7361·6765··ormative·message | |||
| 0004b3a0:·2062·6173·6564·0a20·2020·2020·206f·6e20···based.······on· | |||
| 0004b3b0:·7468·6520·6175·7468·7365·6c65·6374·2069··the·authselect·i | |||
| 0004b3c0:·6e74·6567·7269·7479·2063·6865·636b·2072··ntegrity·check·r | |||
| 0004b3d0:·6573·756c·740a·2020·2020·616e·7369·626c··esult.····ansibl | |||
| 0004b3e0:·652e·6275·696c·7469·6e2e·6173·7365·7274··e.builtin.assert | |||
| 0004b3f0:·3a0a·2020·2020·2020·7468·6174·3a0a·2020··:.······that:.·· | |||
| 0004b400:·2020·2020·2d20·7265·7375·6c74·5f61·7574······-·result_aut | |||
| 0004b410:·6873·656c·6563·745f·6368·6563·6b5f·636d··hselect_check_cm | |||
| 0004b420:·642e·7263·203d·3d20·300a·2020·2020·2020··d.rc·==·0.······ | |||
| 0004b430:·6661·696c·5f6d·7367·3a0a·2020·2020·2020··fail_msg:.······ | |||
| 0004b440:·2d20·6175·7468·7365·6c65·6374·2069·6e74··-·authselect·int | |||
| 0004b450:·6567·7269·7479·2063·6865·636b·2066·6169··egrity·check·fai | |||
| 0004b460:·6c65·642e·2052·656d·6564·6961·7469·6f6e··led.·Remediation | |||
| 0004b470:·2061·626f·7274·6564·210a·2020·2020·2020···aborted!.······ | |||
| 0004b480:·2d20·5468·6973·2072·656d·6564·6961·7469··-·This·remediati | |||
| 0004b490:·6f6e·2063·6f75·6c64·206e·6f74·2062·6520··on·could·not·be· | |||
| Max diff block lines reached; 379890/430728 bytes (88.20%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:7 | 42 | ····*·cpe:/o:oracle:linux:7 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 774, 38 lines modified | Offset 774, 14 lines modified | ||
| 774 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 774 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 775 | fi | 775 | fi |
| 776 | fi | 776 | fi |
| 777 | else | 777 | else |
| 778 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 778 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 779 | fi | 779 | fi |
| 780 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 781 | --- | ||
| 782 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 783 | kind:·MachineConfig | ||
| 784 | spec: | ||
| 785 | ··config: | ||
| 786 | ····ignition: | ||
| 787 | ······version:·3.1.0 | ||
| 788 | ····storage: | ||
| 789 | ······files: | ||
| 790 | ······-·contents: | ||
| 791 | ··········source: | ||
| 792 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 793 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 794 | ········mode:·0644 | ||
| 795 | ········path:·/etc/pam.d/password-auth | ||
| 796 | ········overwrite:·true | ||
| 797 | ······-·contents: | ||
| 798 | ··········source: | ||
| 799 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 800 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 801 | ········mode:·0644 | ||
| 802 | ········path:·/etc/pam.d/system-auth | ||
| 803 | ········overwrite:·true | ||
| 804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 780 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 805 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 781 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 806 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 782 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 807 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 783 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 808 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 784 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 809 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 785 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 810 | ····authselect | 786 | ····authselect |
| Offset 924, 14 lines modified | Offset 900, 38 lines modified | ||
| 924 | ··-·PCI-DSSv4-8.3.1 | 900 | ··-·PCI-DSSv4-8.3.1 |
| 925 | ··-·configure_strategy | 901 | ··-·configure_strategy |
| 926 | ··-·high_severity | 902 | ··-·high_severity |
| 927 | ··-·low_complexity | 903 | ··-·low_complexity |
| 928 | ··-·medium_disruption | 904 | ··-·medium_disruption |
| 929 | ··-·no_empty_passwords | 905 | ··-·no_empty_passwords |
| 930 | ··-·no_reboot_needed | 906 | ··-·no_reboot_needed |
| 907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 908 | --- | ||
| 909 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 910 | kind:·MachineConfig | ||
| 911 | spec: | ||
| 912 | ··config: | ||
| 913 | ····ignition: | ||
| 914 | ······version:·3.1.0 | ||
| 915 | ····storage: | ||
| 916 | ······files: | ||
| 917 | ······-·contents: | ||
| 918 | ··········source: | ||
| 919 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 920 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 921 | ········mode:·0644 | ||
| 922 | ········path:·/etc/pam.d/password-auth | ||
| 923 | ········overwrite:·true | ||
| 924 | ······-·contents: | ||
| 925 | ··········source: | ||
| 926 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 927 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 928 | ········mode:·0644 | ||
| 929 | ········path:·/etc/pam.d/system-auth | ||
| 930 | ········overwrite:·true | ||
| 931 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 931 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 932 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 932 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 933 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 933 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 934 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 934 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 935 | #·echo·$PATH | 935 | #·echo·$PATH |
| 936 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 936 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1027, 14 lines modified | Offset 1027, 19 lines modified | ||
| 1027 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 1027 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 1028 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1028 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1029 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1029 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1030 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1030 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1031 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1031 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1032 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1032 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1033 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1033 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1035 | [[packages]] | ||
| 1036 | name·=·"rsyslog" | ||
| 1037 | version·=·"*" | ||
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1035 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1036 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1037 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1038 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1039 | #·Remediation·is·applicable·only·in·certain·platforms | 1043 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1040 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1044 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1060, 38 lines modified | Offset 1065, 33 lines modified | ||
| 1060 | ··-·NIST-800-53-CM-6(a) | 1065 | ··-·NIST-800-53-CM-6(a) |
| 1061 | ··-·enable_strategy | 1066 | ··-·enable_strategy |
| 1062 | ··-·low_complexity | 1067 | ··-·low_complexity |
| 1063 | ··-·low_disruption | 1068 | ··-·low_disruption |
| 1064 | ··-·medium_severity | 1069 | ··-·medium_severity |
| 1065 | ··-·no_reboot_needed | 1070 | ··-·no_reboot_needed |
| 1066 | ··-·package_rsyslog_installed | 1071 | ··-·package_rsyslog_installed |
| 1067 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1068 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1069 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1070 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1071 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 18470/40406 bytes (45.71%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2028·6173·206f·6620·3230·323 | 00037cc0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037cd0:·323 | 00037cd0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17112, 203 lines modified | Offset 17112, 203 lines modified | ||
| 00042d70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00042d70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00042d80:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | 00042d80:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | ||
| 00042d90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00042d90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00042da0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00042da0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00042db0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00042db0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00042dc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00042dc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00042dd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00042dd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00042de0:·6564·6961·7469·6f6e·20 | 00042de0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00042df0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 00042e00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00042e10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00042e20:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 00042e30:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 00042e40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00042e50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00042e60:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00042e70:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00042 | 00042df0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 00042e00:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00042e10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00042e20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00042e30:·6522·2069·643d·2269·646d·3536·3431·223e··e"·id="idm5641"> | |||
| 00042e40:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 00042e50:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00042e60:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 00042e70:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 00042e80:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00042e90:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00042ea0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00042eb0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00042ec0:·6172·6765·743d·2223·6964·6d35·3634·3222··arget="#idm5642" | |||
| 00042ed0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00042ee0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00042ef0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00042f00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00042f10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00042f20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00042f30:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00042f40:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00042f50:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00042f60:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00042f70:·6964·3d22·6964·6d35·3634·3222·3e3c·7461··id="idm5642"><ta | |||
| 00042f80:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00042f90:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00042fa0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00042fb0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00042fc0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00042fd0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00042fe0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00042ff0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00043000:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00043010:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00043020:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00043030:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00043040:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00043050:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00043060:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00043070:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 00043080:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 00043090:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 000430a0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 000430b0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 000430c0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 000430d0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 000430e0:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 000430f0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 00043100:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 00043110:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| 00043120:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 00043130:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 00043140:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 00043150:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 00043160:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 00043170:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 00043180:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00043190:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 000431a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 000431b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 000431c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 000431d0:·2223·6964·6d35·3634·3322·2074·6162·696e··"#idm5643"·tabin | |||
| 000431e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 000431f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043200:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043210:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043220:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00043230:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 00043240:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00043250:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00043260:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00043270:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00043280:·2269·646d·3536·3433·223e·3c74·6162·6c65··"idm5643"><table | |||
| 00043290:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000432a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000432b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000432c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 000432d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 000432e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000432f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00043300:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004 | 00043310:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 00042ea0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0004 | 00043320:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 00043330:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0004 | 00043340:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0004 | 00043350:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 00042ee0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00042ef0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00042f00:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00042f10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00042f20:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| Max diff block lines reached; 474352/502282 bytes (94.44%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 570, 14 lines modified | Offset 570, 19 lines modified | ||
| 570 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 570 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 573 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 573 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 574 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 574 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 576 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 576 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 578 | [[packages]] | ||
| 579 | name·=·"aide" | ||
| 580 | version·=·"*" | ||
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 582 | #·Remediation·is·applicable·only·in·certain·platforms | 586 | #·Remediation·is·applicable·only·in·certain·platforms |
| 583 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 587 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 607, 38 lines modified | Offset 612, 33 lines modified | ||
| 607 | ··-·PCI-DSSv4-11.5.2 | 612 | ··-·PCI-DSSv4-11.5.2 |
| 608 | ··-·enable_strategy | 613 | ··-·enable_strategy |
| 609 | ··-·low_complexity | 614 | ··-·low_complexity |
| 610 | ··-·low_disruption | 615 | ··-·low_disruption |
| 611 | ··-·medium_severity | 616 | ··-·medium_severity |
| 612 | ··-·no_reboot_needed | 617 | ··-·no_reboot_needed |
| 613 | ··-·package_aide_installed | 618 | ··-·package_aide_installed |
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 615 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 616 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 617 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 618 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 619 | package·--add=aide | ||
| 620 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 621 | [[packages]] | ||
| 622 | name·=·"aide" | ||
| 623 | version·=·"*" | ||
| 624 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 619 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 625 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 620 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 626 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 621 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 627 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 622 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 628 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 623 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 629 | include·install_aide | 624 | include·install_aide |
| 630 | class·install_aide·{ | 625 | class·install_aide·{ |
| 631 | ··package·{·'aide': | 626 | ··package·{·'aide': |
| 632 | ····ensure·=>·'installed', | 627 | ····ensure·=>·'installed', |
| 633 | ··} | 628 | ··} |
| 634 | } | 629 | } |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 635 | package·--add=aide | ||
| 635 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 636 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 636 | Run·the·following·command·to·generate·a·new·database: | 637 | Run·the·following·command·to·generate·a·new·database: |
| 637 | $·sudo·/usr/sbin/aide·--init | 638 | $·sudo·/usr/sbin/aide·--init |
| 638 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 639 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 639 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 640 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 640 | To·initiate·a·manual·check,·run·the·following·command: | 641 | To·initiate·a·manual·check,·run·the·following·command: |
| 641 | $·sudo·/usr/sbin/aide·--check | 642 | $·sudo·/usr/sbin/aide·--check |
| Offset 17625, 14 lines modified | Offset 17625, 19 lines modified | ||
| 17625 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 17625 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 17626 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 17626 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 17627 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 17627 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 17628 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 17628 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 17629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 17629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 17630 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 17630 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| 17631 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule | 17631 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule |
| 17632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 17633 | [[packages]] | ||
| 17634 | name·=·"screen" | ||
| 17635 | version·=·"*" | ||
| 17632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 17636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 17633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 17637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 17634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 17638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 17635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 17639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 17636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 17640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 17637 | #·Remediation·is·applicable·only·in·certain·platforms | 17641 | #·Remediation·is·applicable·only·in·certain·platforms |
| 17638 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 17642 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 17660, 38 lines modified | Offset 17665, 33 lines modified | ||
| 17660 | ··-·NIST-800-53-CM-6(a) | 17665 | ··-·NIST-800-53-CM-6(a) |
| 17661 | ··-·enable_strategy | 17666 | ··-·enable_strategy |
| 17662 | ··-·low_complexity | 17667 | ··-·low_complexity |
| 17663 | ··-·low_disruption | 17668 | ··-·low_disruption |
| 17664 | ··-·medium_severity | 17669 | ··-·medium_severity |
| 17665 | ··-·no_reboot_needed | 17670 | ··-·no_reboot_needed |
| 17666 | ··-·package_screen_installed | 17671 | ··-·package_screen_installed |
| 17667 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 17668 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 17669 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 17670 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 17671 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 17672 | package·--add=screen | ||
| 17673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 17674 | [[packages]] | ||
| 17675 | name·=·"screen" | ||
| 17676 | version·=·"*" | ||
| 17677 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 17672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 17678 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 17673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 17679 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 17674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 17680 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 17675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 17681 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 17676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 17682 | include·install_screen | 17677 | include·install_screen |
| Max diff block lines reached; 55968/61917 bytes (90.39%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e40:·3230·323 | 00037e40:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 17130, 203 lines modified | Offset 17130, 203 lines modified | ||
| 00042e90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00042e90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00042ea0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 00042ea0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 00042eb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00042eb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00042ec0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00042ec0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00042ed0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00042ed0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00042ee0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00042ee0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00042ef0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00042ef0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00042f00:·223e·5265·6d65·6469·6174·696f·6e20· | 00042f00:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00042f10:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00042f10:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 00042f20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00042f30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00042f40:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00042f50:·646d·3536·3431·223e·3c74·6162·6c65·2063··dm5641"><table·c | |||
| 00042f60:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00042f70:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00042f80:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00042f90:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00042fa0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00042fb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00042fc0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00042fd0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00042fe0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042ff0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00043000:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00043010:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00043020:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00043030:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00043040:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00043050:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 00043060:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 00043070:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 00043080:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 00043090:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 000430a0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 000430b0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 000430c0:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 000430d0:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 000430e0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 000430f0:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 00043100:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 00043110:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 00043120:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 00043130:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 00043140:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 00043150:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 00043160:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00043170:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00043180:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00043190:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 000431a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 000431b0:·3536·3432·2220·7461·6269·6e64·6578·3d22··5642"·tabindex=" | |||
| 000431c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 000431d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 000431e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 000431f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00043200:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00043210:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0004 | 00042f20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0004 | 00042f30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0004 | 00042f40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0004 | 00042f50:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 00042f60:·3634·3122·3e3c·7072·653e·3c63·6f64·653e··641"><pre><code> | |||
| 00042f70:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00042f80:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 00042f90:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00043260:·3634·3222·3e3c·7461·626c·6520·636c·6173··642"><table·clas | |||
| 00043270:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00043280:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00043290:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000432a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000432b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000432c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000432d0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 000432e0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 000432f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00043300:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00043310:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00043320:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00043330:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00043340:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00043350:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00043360:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 00043370:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 00043380:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 00043390:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 000433a0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 000433b0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 000433c0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000433d0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000433e0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000433f0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 00043400:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 00043410:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 00043420:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 00043430:·2d4f·4c30·372d·3030·2d30·3230·3032·390a··-OL07-00-020029. | |||
| 00043440:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00043450:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 00043460:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 00043470:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 00043480:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00043490:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 000434a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 000434b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 000434c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 000434d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 000434e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 000434f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 00043500:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00043510:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00043520:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| Max diff block lines reached; 474352/502144 bytes (94.47%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:7 | 46 | ····*·cpe:/o:oracle:linux:7 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 574, 14 lines modified | Offset 574, 19 lines modified | ||
| 574 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 574 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 577 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 577 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 578 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 578 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 579 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 579 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 580 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 580 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | [[packages]] | ||
| 583 | name·=·"aide" | ||
| 584 | version·=·"*" | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 586 | #·Remediation·is·applicable·only·in·certain·platforms | 590 | #·Remediation·is·applicable·only·in·certain·platforms |
| 587 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 591 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 611, 38 lines modified | Offset 616, 33 lines modified | ||
| 611 | ··-·PCI-DSSv4-11.5.2 | 616 | ··-·PCI-DSSv4-11.5.2 |
| 612 | ··-·enable_strategy | 617 | ··-·enable_strategy |
| 613 | ··-·low_complexity | 618 | ··-·low_complexity |
| 614 | ··-·low_disruption | 619 | ··-·low_disruption |
| 615 | ··-·medium_severity | 620 | ··-·medium_severity |
| 616 | ··-·no_reboot_needed | 621 | ··-·no_reboot_needed |
| 617 | ··-·package_aide_installed | 622 | ··-·package_aide_installed |
| 618 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 619 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 620 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 621 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 622 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 623 | package·--add=aide | ||
| 624 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 625 | [[packages]] | ||
| 626 | name·=·"aide" | ||
| 627 | version·=·"*" | ||
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 623 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 624 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 625 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 626 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 627 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 633 | include·install_aide | 628 | include·install_aide |
| 634 | class·install_aide·{ | 629 | class·install_aide·{ |
| 635 | ··package·{·'aide': | 630 | ··package·{·'aide': |
| 636 | ····ensure·=>·'installed', | 631 | ····ensure·=>·'installed', |
| 637 | ··} | 632 | ··} |
| 638 | } | 633 | } |
| 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 639 | package·--add=aide | ||
| 639 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 640 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 640 | Run·the·following·command·to·generate·a·new·database: | 641 | Run·the·following·command·to·generate·a·new·database: |
| 641 | $·sudo·/usr/sbin/aide·--init | 642 | $·sudo·/usr/sbin/aide·--init |
| 642 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 643 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 643 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 644 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 644 | To·initiate·a·manual·check,·run·the·following·command: | 645 | To·initiate·a·manual·check,·run·the·following·command: |
| 645 | $·sudo·/usr/sbin/aide·--check | 646 | $·sudo·/usr/sbin/aide·--check |
| Offset 17629, 14 lines modified | Offset 17629, 19 lines modified | ||
| 17629 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 17629 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 17630 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 17630 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 17631 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 17631 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 17632 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 17632 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 17633 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 17633 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 17634 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 17634 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| 17635 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule | 17635 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255900r880615_rule |
| 17636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 17637 | [[packages]] | ||
| 17638 | name·=·"screen" | ||
| 17639 | version·=·"*" | ||
| 17636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 17640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 17637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 17641 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 17638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 17642 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 17639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 17643 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 17640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 17644 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 17641 | #·Remediation·is·applicable·only·in·certain·platforms | 17645 | #·Remediation·is·applicable·only·in·certain·platforms |
| 17642 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 17646 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 17664, 38 lines modified | Offset 17669, 33 lines modified | ||
| 17664 | ··-·NIST-800-53-CM-6(a) | 17669 | ··-·NIST-800-53-CM-6(a) |
| 17665 | ··-·enable_strategy | 17670 | ··-·enable_strategy |
| 17666 | ··-·low_complexity | 17671 | ··-·low_complexity |
| 17667 | ··-·low_disruption | 17672 | ··-·low_disruption |
| 17668 | ··-·medium_severity | 17673 | ··-·medium_severity |
| 17669 | ··-·no_reboot_needed | 17674 | ··-·no_reboot_needed |
| 17670 | ··-·package_screen_installed | 17675 | ··-·package_screen_installed |
| 17671 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 17672 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 17673 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 17674 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 17675 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 17676 | package·--add=screen | ||
| 17677 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 17678 | [[packages]] | ||
| 17679 | name·=·"screen" | ||
| 17680 | version·=·"*" | ||
| 17681 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 17676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 17682 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 17677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 17683 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 17678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 17684 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 17679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 17685 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 17680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 17686 | include·install_screen | 17681 | include·install_screen |
| Max diff block lines reached; 55968/61930 bytes (90.37%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e40:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037e50:·2d3 | 00037e50:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15054, 202 lines modified | Offset 15054, 202 lines modified | ||
| 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | ||
| 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ad40:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ad50:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ad60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ad70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ad80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ad90:·2269·646d·3536·3834·223e·3c70·7265·3e3c··"idm5684"><pre>< | |||
| 0003ada0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003adb0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003adc0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003ad40:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ad50:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ad60:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ad70:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ad80:·6964·3d22·6964·6d35·3638·3422·3e3c·7461··id="idm5684"><ta | |||
| 0003ad90:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ada0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003adb0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003adc0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003add0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ade0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003adf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae00:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ae10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ae20:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ae30:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ae40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae50:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ae60:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003ae70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ae80:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003ae90:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003aea0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003aeb0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003aec0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003aed0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003aee0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003aef0:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003af00:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003af10:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003af20:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| 0003af30:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003af40:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003af50:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003af60:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003af70:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003af80:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003a | 0003add0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003a | 0003ade0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003a | 0003adf0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003a | 0003ae00:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003a | 0003ae10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a | 0003ae20:·2223·6964·6d35·3638·3522·2074·6162·696e··"#idm5685"·tabin | ||
| 0003a | 0003ae30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ae50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ae60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ae70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ae80:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003ae90:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003aea0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aeb0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aec0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aed0:·6d35·3638·3522·3e3c·7461·626c·6520·636c··m5685"><table·cl | |||
| 0003aee0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aef0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003af00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003af10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003af20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003af30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003af40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003af50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003af60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003af70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003af80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003af90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003afa0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003afb0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003afc0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003afd0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003afe0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003aff0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b000:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003b010:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b020:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b030:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b040:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003b050:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003b060:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003b070:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 0003b080:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003b090:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003b0a0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003b0b0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003b0c0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003b0d0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003b0e0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b0f0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b100:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b110:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b120:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b130:·3638·3622·2074·6162·696e·6465·783d·2230··686"·tabindex="0 | |||
| 0003b140:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b150:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| Max diff block lines reached; 573054/600846 bytes (95.37%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 14 lines modified | Offset 115, 19 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | #·Remediation·is·applicable·only·in·certain·platforms | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 128 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 132 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 152, 38 lines modified | Offset 157, 33 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 159 | ··-·low_complexity |
| 155 | ··-·low_disruption | 160 | ··-·low_disruption |
| 156 | ··-·medium_severity | 161 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·--add=aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 169 | include·install_aide |
| 175 | class·install_aide·{ | 170 | class·install_aide·{ |
| 176 | ··package·{·'aide': | 171 | ··package·{·'aide': |
| 177 | ····ensure·=>·'installed', | 172 | ····ensure·=>·'installed', |
| 178 | ··} | 173 | ··} |
| 179 | } | 174 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=aide | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 597, 14 lines modified | Offset 597, 19 lines modified | ||
| 597 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 597 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 598 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 598 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 599 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 599 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 600 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 600 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 601 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 601 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 602 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 602 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 603 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 603 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 605 | [[packages]] | ||
| 606 | name·=·"sudo" | ||
| 607 | version·=·"*" | ||
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 608 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 609 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 610 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 611 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 612 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 609 | #·Remediation·is·applicable·only·in·certain·platforms | 613 | #·Remediation·is·applicable·only·in·certain·platforms |
| 610 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 614 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 631, 38 lines modified | Offset 636, 33 lines modified | ||
| 631 | ··-·PCI-DSSv4-2.2.6 | 636 | ··-·PCI-DSSv4-2.2.6 |
| 632 | ··-·enable_strategy | 637 | ··-·enable_strategy |
| 633 | ··-·low_complexity | 638 | ··-·low_complexity |
| 634 | ··-·low_disruption | 639 | ··-·low_disruption |
| 635 | ··-·medium_severity | 640 | ··-·medium_severity |
| 636 | ··-·no_reboot_needed | 641 | ··-·no_reboot_needed |
| 637 | ··-·package_sudo_installed | 642 | ··-·package_sudo_installed |
| 638 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 639 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 640 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 641 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 642 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 643 | package·--add=sudo | ||
| 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 645 | [[packages]] | ||
| 646 | name·=·"sudo" | ||
| 647 | version·=·"*" | ||
| 648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 649 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 650 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 651 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 652 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 653 | include·install_sudo | 648 | include·install_sudo |
| Max diff block lines reached; 64726/70323 bytes (92.04%) of diff not shown. | |||
| Offset 14301, 16 lines modified | Offset 14301, 16 lines modified | ||
| 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e30:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037e40:·2d3 | 00037e40:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15059, 202 lines modified | Offset 15059, 202 lines modified | ||
| 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | ||
| 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | ||
| 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ad90:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003ada0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003adb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003adc0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003add0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ade0:·6964·3d22·6964·6d35·3638·3422·3e3c·7072··id="idm5684"><pr | |||
| 0003adf0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003ae00:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ae10:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ad90:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003ada0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003adb0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003adc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003add0:·6522·2069·643d·2269·646d·3536·3834·223e··e"·id="idm5684"> | |||
| 0003ade0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003adf0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ae00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ae10:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ae20:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ae30:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ae40:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ae50:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ae60:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae70:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ae80:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ae90:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003aea0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aeb0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003aec0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003aed0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003aee0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003aef0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003af00:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003af10:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003af20:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003af30:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003af40:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003af50:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003af60:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003af70:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003af80:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003af90:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003afa0:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003afb0:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003afc0:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003afd0:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003a | 0003ae20:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003a | 0003ae30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003ae40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ae50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ae60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ae70:·6574·3d22·2369·646d·3536·3835·2220·7461··et="#idm5685"·ta | |||
| 0003ae80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ae90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003aea0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003aeb0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003aec0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003aed0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003aee0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003aef0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003af10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af20:·2269·646d·3536·3835·223e·3c74·6162·6c65··"idm5685"><table | |||
| 0003af30:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003af40:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003af50:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af60:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af70:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af90:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003afa0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003afb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003afc0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003afd0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003afe0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003aff0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b000:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b010:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b020:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b030:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b040:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b050:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b060:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b070:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b080:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b090:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b0a0:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b0b0:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003b0c0:·2020·2020·7975·6d20·696e·7374·616c·6c20······yum·install· | |||
| 0003b0d0:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003b0e0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b0f0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b100:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b110:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b120:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b130:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b140:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b150:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b160:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b170:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b180:·646d·3536·3836·2220·7461·6269·6e64·6578··dm5686"·tabindex | |||
| 0003b190:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b1a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| Max diff block lines reached; 603084/630876 bytes (95.59%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 116, 14 lines modified | Offset 116, 19 lines modified | ||
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | 132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 153, 38 lines modified | Offset 158, 33 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 160 | ··-·low_complexity |
| 156 | ··-·low_disruption | 161 | ··-·low_disruption |
| 157 | ··-·medium_severity | 162 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·--add=aide | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | 170 | include·install_aide |
| 176 | class·install_aide·{ | 171 | class·install_aide·{ |
| 177 | ··package·{·'aide': | 172 | ··package·{·'aide': |
| 178 | ····ensure·=>·'installed', | 173 | ····ensure·=>·'installed', |
| 179 | ··} | 174 | ··} |
| 180 | } | 175 | } |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 1122, 14 lines modified | Offset 1122, 19 lines modified | ||
| 1122 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 1122 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 1123 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1123 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1124 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1124 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1125 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1125 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1130 | [[packages]] | ||
| 1131 | name·=·"sudo" | ||
| 1132 | version·=·"*" | ||
| 1129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1134 | #·Remediation·is·applicable·only·in·certain·platforms | 1138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1156, 38 lines modified | Offset 1161, 33 lines modified | ||
| 1156 | ··-·PCI-DSSv4-2.2.6 | 1161 | ··-·PCI-DSSv4-2.2.6 |
| 1157 | ··-·enable_strategy | 1162 | ··-·enable_strategy |
| 1158 | ··-·low_complexity | 1163 | ··-·low_complexity |
| 1159 | ··-·low_disruption | 1164 | ··-·low_disruption |
| 1160 | ··-·medium_severity | 1165 | ··-·medium_severity |
| 1161 | ··-·no_reboot_needed | 1166 | ··-·no_reboot_needed |
| 1162 | ··-·package_sudo_installed | 1167 | ··-·package_sudo_installed |
| 1163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1168 | package·--add=sudo | ||
| 1169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1170 | [[packages]] | ||
| 1171 | name·=·"sudo" | ||
| 1172 | version·=·"*" | ||
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1178 | include·install_sudo | 1173 | include·install_sudo |
| Max diff block lines reached; 70158/75763 bytes (92.60%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e50:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037e60:·2d3 | 00037e60:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15045, 202 lines modified | Offset 15045, 202 lines modified | ||
| 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | ||
| 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003acb0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003acb0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003acc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003acd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ace0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003acf0:·2069·643d·2269·646d·3536·3834·223e·3c74···id="idm5684"><t | |||
| 0003ad00:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ad10:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ad20:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ad30:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ad40:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ad50:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ad60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ad70:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ad80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ad90:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ada0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003adb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003adc0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003add0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ade0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003adf0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003ae00:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003ae10:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003ae20:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003ae30:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003ae40:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003ae50:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003ae60:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003ae70:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003ae80:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003ae90:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003aea0:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003aeb0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003aec0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003aed0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003aee0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003aef0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003af00:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af10:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003af20:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003af30:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003af40:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003af50:·3d22·2369·646d·3536·3835·2220·7461·6269··="#idm5685"·tabi | |||
| 0003af60:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003af70:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003af80:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003af90:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003afa0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003afb0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003a | 0003acc0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 0003a | 0003acd0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003a | 0003ace0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003a | 0003acf0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003 | 0003ad00:·3d22·6964·6d35·3638·3422·3e3c·7072·653e··="idm5684"><pre> | ||
| 0003b010:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b020:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b030:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b040:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b050:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b060:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b070:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b080:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b090:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b0a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b0b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b0c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b0d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b0e0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b0f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b100:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b110:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b120:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b130:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b140:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b150:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b160:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b170:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b180:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b190:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b1a0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b1b0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b1c0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b1d0:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | |||
| 0003b1e0:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003b1f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b200:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b210:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b220:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b230:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b240:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b250:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b260:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b270:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b280:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b290:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b2a0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b2b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b2c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b2d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b2e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b2f0:·7461·7267·6574·3d22·2369·646d·3536·3836··target="#idm5686 | |||
| 0003b300:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| Max diff block lines reached; 420256/448048 bytes (93.80%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 150, 38 lines modified | Offset 155, 33 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 157 | ··-·low_complexity |
| 153 | ··-·low_disruption | 158 | ··-·low_disruption |
| 154 | ··-·medium_severity | 159 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 167 | include·install_aide |
| 173 | class·install_aide·{ | 168 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 169 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 170 | ····ensure·=>·'installed', |
| 176 | ··} | 171 | ··} |
| 177 | } | 172 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 560, 14 lines modified | Offset 560, 19 lines modified | ||
| 560 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 560 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 561 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 561 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 562 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 562 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 563 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 563 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 564 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 564 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 565 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 565 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 566 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 566 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 567 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 568 | [[packages]] | ||
| 569 | name·=·"sudo" | ||
| 570 | version·=·"*" | ||
| 567 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 571 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 568 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 572 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 569 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 573 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 570 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 574 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 571 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 575 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 572 | #·Remediation·is·applicable·only·in·certain·platforms | 576 | #·Remediation·is·applicable·only·in·certain·platforms |
| 573 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 577 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 594, 38 lines modified | Offset 599, 33 lines modified | ||
| 594 | ··-·PCI-DSSv4-2.2.6 | 599 | ··-·PCI-DSSv4-2.2.6 |
| 595 | ··-·enable_strategy | 600 | ··-·enable_strategy |
| 596 | ··-·low_complexity | 601 | ··-·low_complexity |
| 597 | ··-·low_disruption | 602 | ··-·low_disruption |
| 598 | ··-·medium_severity | 603 | ··-·medium_severity |
| 599 | ··-·no_reboot_needed | 604 | ··-·no_reboot_needed |
| 600 | ··-·package_sudo_installed | 605 | ··-·package_sudo_installed |
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 606 | package·--add=sudo | ||
| 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 608 | [[packages]] | ||
| 609 | name·=·"sudo" | ||
| 610 | version·=·"*" | ||
| 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 607 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 608 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 609 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 610 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 616 | include·install_sudo | 611 | include·install_sudo |
| Max diff block lines reached; 49188/54904 bytes (89.59%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2028·6173·206f·6620·3230·323 | 00037e40:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037e50:·323 | 00037e50:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 14718, 183 lines modified | Offset 14718, 183 lines modified | ||
| 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | ||
| 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039840:·6469·6174·696f·6e20·53 | 00039840:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039850:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039860:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039870:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039880:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039890:·2220·6964·3d22·6964·6d31·3035·3734·223e··"·id="idm10574"> | |||
| 00039850:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00039860:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039870:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039880:·7073·6522·2069·643d·2269·646d·3130·3537··pse"·id="idm1057 | |||
| 00039890:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 000398a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000398b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000398c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 000398d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 000398e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 000398f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039900:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00039910:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039920:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00039930:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00039940:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00039950:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00039960:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00039970:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039 | 000398a0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 00039 | 000398b0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | ||
| 00039 | 000398c0:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | ||
| 000398d0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 000398e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000398f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00039900:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00039910:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039920:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039930:·2369·646d·3130·3537·3522·2074·6162·696e··#idm10575"·tabin | |||
| 00039940:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039950:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039960:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039970:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039980:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039990:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 000399b0:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 000399c0:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 000399d0:·7574·6f6d·6174·6963·220a·6669·0a3c·2f63··utomatic".fi.</c | |||
| 000399e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 000399f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039a00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039a10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039a20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039a30:·6964·6d31·3035·3735·2220·7461·6269·6e64··idm10575"·tabind | |||
| 00039a40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039a50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039a60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039a70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039a80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039a90:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00039 | 000399a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 00039 | 000399b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00039 | 000399c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00039 | 000399d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 00039 | 000399e0:·6d31·3035·3735·223e·3c74·6162·6c65·2063··m10575"><table·c | ||
| 00039 | 000399f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 00039 | 00039a00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 00039 | 00039a10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 00039 | 00039a20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 00039 | 00039a30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 00039 | 00039a40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 00039 | 00039a50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 00039 | 00039a60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 00039 | 00039a70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00039 | 00039a80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 00039 | 00039a90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 00039 | 00039aa0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 00039 | 00039ab0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 00039 | 00039ac0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 00039 | 00039ad0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 00039ae0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 00039af0:·7569·6574·2022·646e·662d·6175·746f·6d61··uiet·"dnf-automa | |||
| 00039b00:·7469·6322·203b·2074·6865·6e0a·2020·2020··tic"·;·then.···· | |||
| 00039b10:·7975·6d20·696e·7374·616c·6c20·2d79·2022··yum·install·-y·" | |||
| 00039b20:·646e·662d·6175·746f·6d61·7469·6322·0a66··dnf-automatic".f | |||
| 00039b30:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 00039be0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 00039bf0:·2064·6e66·2d61·7574·6f6d·6174·6963·2069···dnf-automatic·i | |||
| 00039c00:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00039c10:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00039c20:·2064·6e66·2d61·7574·6f6d·6174·6963·0a20···dnf-automatic.· | |||
| 00039c30:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 00039c40:·740a·2020·7461·6773·3a0a·2020·2d20·656e··t.··tags:.··-·en | |||
| 00039c50:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 00039c60:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 00039c70:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 00039c80:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 00039c90:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 00039ca0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 00039cb0:·2070·6163·6b61·6765·5f64·6e66·2d61·7574···package_dnf-aut | |||
| 00039cc0:·6f6d·6174·6963·5f69·6e73·7461·6c6c·6564··omatic_installed | |||
| 00039cd0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039 | 00039b40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 00039cf0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039d00:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039d10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039d20:·743d·2223·6964·6d31·3035·3736·2220·7461··t="#idm10576"·ta | |||
| Max diff block lines reached; 123986/149156 bytes (83.13%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 14 lines modified | Offset 80, 19 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"dnf-automatic" | ||
| 90 | version·=·"*" | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 96 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 105, 38 lines modified | Offset 110, 33 lines modified | ||
| 105 | ··tags: | 110 | ··tags: |
| 106 | ··-·enable_strategy | 111 | ··-·enable_strategy |
| 107 | ··-·low_complexity | 112 | ··-·low_complexity |
| 108 | ··-·low_disruption | 113 | ··-·low_disruption |
| 109 | ··-·medium_severity | 114 | ··-·medium_severity |
| 110 | ··-·no_reboot_needed | 115 | ··-·no_reboot_needed |
| 111 | ··-·package_dnf-automatic_installed | 116 | ··-·package_dnf-automatic_installed |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=dnf-automatic | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | include·install_dnf-automatic | 122 | include·install_dnf-automatic |
| 128 | class·install_dnf-automatic·{ | 123 | class·install_dnf-automatic·{ |
| 129 | ··package·{·'dnf-automatic': | 124 | ··package·{·'dnf-automatic': |
| 130 | ····ensure·=>·'installed', | 125 | ····ensure·=>·'installed', |
| 131 | ··} | 126 | ··} |
| 132 | } | 127 | } |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=dnf-automatic | ||
| 133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 134 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 135 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 136 | automatic.conf. | 137 | automatic.conf. |
| 137 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 138 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 139 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 11180, 33 lines modified | Offset 11180, 33 lines modified | ||
| 11180 | ··-·PCI-DSSv4-2.2.4 | 11180 | ··-·PCI-DSSv4-2.2.4 |
| 11181 | ··-·disable_strategy | 11181 | ··-·disable_strategy |
| 11182 | ··-·low_complexity | 11182 | ··-·low_complexity |
| 11183 | ··-·low_disruption | 11183 | ··-·low_disruption |
| 11184 | ··-·medium_severity | 11184 | ··-·medium_severity |
| 11185 | ··-·no_reboot_needed | 11185 | ··-·no_reboot_needed |
| 11186 | ··-·package_dhcp_removed | 11186 | ··-·package_dhcp_removed |
| 11187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 11189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 11190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 11191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 11192 | package·--remove=dhcp | ||
| 11193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 11187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 11194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 11188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 11195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 11189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 11196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 11190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 11197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 11191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 11198 | include·remove_dhcp | 11192 | include·remove_dhcp |
| 11199 | class·remove_dhcp·{ | 11193 | class·remove_dhcp·{ |
| 11200 | ··package·{·'dhcp': | 11194 | ··package·{·'dhcp': |
| 11201 | ····ensure·=>·'purged', | 11195 | ····ensure·=>·'purged', |
| 11202 | ··} | 11196 | ··} |
| 11203 | } | 11197 | } |
| 11198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 11200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 11201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 11202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 11203 | package·--remove=dhcp | ||
| 11204 | Group ·Mail·Server·Software· Group·contains·1·rule | 11204 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 11205 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 11205 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 11206 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 11206 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 11207 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 11207 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 11208 | possible. | 11208 | possible. |
| 11209 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. | 11209 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. |
| Offset 11291, 33 lines modified | Offset 11291, 33 lines modified | ||
| 11291 | ··-·NIST-800-53-CM-7(b) | 11291 | ··-·NIST-800-53-CM-7(b) |
| 11292 | ··-·disable_strategy | 11292 | ··-·disable_strategy |
| 11293 | ··-·low_complexity | 11293 | ··-·low_complexity |
| 11294 | ··-·low_disruption | 11294 | ··-·low_disruption |
| Max diff block lines reached; 19174/24671 bytes (77.72%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16386, 203 lines modified | Offset 16386, 203 lines modified | ||
| 00040010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00040010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00040020:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 00040020:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 00040030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00040030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00040040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00040040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00040050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00040050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00040060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00040060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00040070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00040070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00040080:·3e52·656d·6564·6961·7469·6f6e·20 | 00040080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00040090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00040090:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 000400a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000400b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000400c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000400d0:·6d35·3638·3422·3e3c·7461·626c·6520·636c··m5684"><table·cl | |||
| 000400e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000400f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00040100:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00040110:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00040120:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00040130:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040140:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00040150:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00040160:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040170:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00040180:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00040190:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 000401a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000401b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 000401c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 000401d0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 000401e0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 000401f0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 00040200:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 00040210:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 00040220:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 00040230:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 00040240:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 00040250:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 00040260:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 00040270:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 00040280:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 00040290:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 000402a0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 000402b0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 000402c0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 000402d0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 000402e0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 000402f0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040300:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040310:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040320:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 00040330:·3638·3522·2074·6162·696e·6465·783d·2230··685"·tabindex="0 | |||
| 00040340:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00040350:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00040360:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00040370:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00040380:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00040390:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 00040 | 000400a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00040 | 000400b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00040 | 000400c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00040 | 000400d0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | ||
| 000403e0:·3835·223e·3c74·6162·6c65·2063·6c61·7373··85"><table·class | |||
| 000403f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040 | 000400e0:·3834·223e·3c70·7265·3e3c·636f·6465·3e0a··84"><pre><code>. | ||
| 000400f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 00040100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 00040110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 00040120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040160:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 00040170:·3638·3522·2074·6162·696e·6465·783d·2230··685"·tabindex="0 | |||
| 00040180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00040190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 000401a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 000401b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 000401c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 000401d0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 000401e0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 000401f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00040200:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00040210:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 00040220:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00040230:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00040240:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00040250:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00040260:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00040270:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00040280:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00040290:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000402a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000402b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000402c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 000402d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 000402e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000402f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00040300:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00040310:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 00040320:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 00040330:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 00040340:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 00040350:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 00040360:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 00040370:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 00040380:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 00040390:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 000403a0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 000403b0:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 000403c0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| Max diff block lines reached; 198905/226697 bytes (87.74%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 410, 14 lines modified | Offset 410, 19 lines modified | ||
| 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 413 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 413 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 416 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 416 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 418 | [[packages]] | ||
| 419 | name·=·"aide" | ||
| 420 | version·=·"*" | ||
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 422 | #·Remediation·is·applicable·only·in·certain·platforms | 426 | #·Remediation·is·applicable·only·in·certain·platforms |
| 423 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 427 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 447, 38 lines modified | Offset 452, 33 lines modified | ||
| 447 | ··-·PCI-DSSv4-11.5.2 | 452 | ··-·PCI-DSSv4-11.5.2 |
| 448 | ··-·enable_strategy | 453 | ··-·enable_strategy |
| 449 | ··-·low_complexity | 454 | ··-·low_complexity |
| 450 | ··-·low_disruption | 455 | ··-·low_disruption |
| 451 | ··-·medium_severity | 456 | ··-·medium_severity |
| 452 | ··-·no_reboot_needed | 457 | ··-·no_reboot_needed |
| 453 | ··-·package_aide_installed | 458 | ··-·package_aide_installed |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·--add=aide | ||
| 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 461 | [[packages]] | ||
| 462 | name·=·"aide" | ||
| 463 | version·=·"*" | ||
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 469 | include·install_aide | 464 | include·install_aide |
| 470 | class·install_aide·{ | 465 | class·install_aide·{ |
| 471 | ··package·{·'aide': | 466 | ··package·{·'aide': |
| 472 | ····ensure·=>·'installed', | 467 | ····ensure·=>·'installed', |
| 473 | ··} | 468 | ··} |
| 474 | } | 469 | } |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 475 | package·--add=aide | ||
| 475 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 476 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 476 | Run·the·following·command·to·generate·a·new·database: | 477 | Run·the·following·command·to·generate·a·new·database: |
| 477 | $·sudo·/usr/sbin/aide·--init | 478 | $·sudo·/usr/sbin/aide·--init |
| 478 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 479 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 479 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 480 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 480 | To·initiate·a·manual·check,·run·the·following·command: | 481 | To·initiate·a·manual·check,·run·the·following·command: |
| 481 | $·sudo·/usr/sbin/aide·--check | 482 | $·sudo·/usr/sbin/aide·--check |
| Offset 5598, 38 lines modified | Offset 5598, 14 lines modified | ||
| 5598 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 5598 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 5599 | fi | 5599 | fi |
| 5600 | fi | 5600 | fi |
| 5601 | else | 5601 | else |
| 5602 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5602 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5603 | fi | 5603 | fi |
| 5604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5605 | --- | ||
| 5606 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 5607 | kind:·MachineConfig | ||
| 5608 | spec: | ||
| 5609 | ··config: | ||
| 5610 | ····ignition: | ||
| 5611 | ······version:·3.1.0 | ||
| 5612 | ····storage: | ||
| 5613 | ······files: | ||
| 5614 | ······-·contents: | ||
| 5615 | ··········source: | ||
| 5616 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 5617 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 5618 | ········mode:·0644 | ||
| 5619 | ········path:·/etc/pam.d/password-auth | ||
| 5620 | ········overwrite:·true | ||
| 5621 | ······-·contents: | ||
| 5622 | ··········source: | ||
| 5623 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 5624 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 5625 | ········mode:·0644 | ||
| 5626 | ········path:·/etc/pam.d/system-auth | ||
| 5627 | ········overwrite:·true | ||
| 5628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 5606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 5631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 5608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 5633 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 5609 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 5634 | ····authselect | 5610 | ····authselect |
| Offset 5751, 14 lines modified | Offset 5727, 38 lines modified | ||
| 5751 | ··-·PCI-DSSv4-8.3.1 | 5727 | ··-·PCI-DSSv4-8.3.1 |
| 5752 | ··-·configure_strategy | 5728 | ··-·configure_strategy |
| 5753 | ··-·high_severity | 5729 | ··-·high_severity |
| 5754 | ··-·low_complexity | 5730 | ··-·low_complexity |
| 5755 | ··-·medium_disruption | 5731 | ··-·medium_disruption |
| 5756 | ··-·no_empty_passwords | 5732 | ··-·no_empty_passwords |
| Max diff block lines reached; 18352/31902 bytes (57.53%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15098, 203 lines modified | Offset 15098, 203 lines modified | ||
| 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b010:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b010:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b020:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b030:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b040:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b050:·6964·6d35·3638·3422·3e3c·7461·626c·6520··idm5684"><table· | |||
| 0003b060:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b070:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b080:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b090:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b0a0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b0b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b0c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b0d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b0e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b0f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b100:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b110:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b120:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b130:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b140:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b150:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b160:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b170:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b180:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b190:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003b1a0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003b1b0:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003b1c0:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003b1d0:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003b1e0:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003b1f0:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 0003b200:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003b210:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b220:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b230:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b240:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b250:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b260:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b270:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b280:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b290:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b2a0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b2b0:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003b2c0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b2d0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b2e0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b2f0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b300:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b310:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b | 0003b020:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003b030:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b040:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b050:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b060:·3536·3834·223e·3c70·7265·3e3c·636f·6465··5684"><pre><code | |||
| 0003b070:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b080:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b090:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b360:·3536·3835·223e·3c74·6162·6c65·2063·6c61··5685"><table·cla | |||
| 0003b370:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b380:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b390:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3a0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3b0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b3e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b3f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b400:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b410:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b420:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b430:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b440:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b450:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b460:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b470:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b480:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b490:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4a0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4b0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4c0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4d0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b4e0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b4f0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b500:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b510:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b520:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b530:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003b540:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b550:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b560:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b570:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b580:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b590:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b5a0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5b0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5c0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b5d0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b5e0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b5f0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b600:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b610:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b620:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| Max diff block lines reached; 1245986/1273778 bytes (97.82%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:8 | 54 | ····*·cpe:/o:oracle:linux:8 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 19 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | #·Remediation·is·applicable·only·in·certain·platforms | 124 | #·Remediation·is·applicable·only·in·certain·platforms |
| 121 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 145, 38 lines modified | Offset 150, 33 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·--add=aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | include·install_aide | 162 | include·install_aide |
| 168 | class·install_aide·{ | 163 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 164 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 165 | ····ensure·=>·'installed', |
| 171 | ··} | 166 | ··} |
| 172 | } | 167 | } |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 173 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 174 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 174 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 175 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 175 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 176 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 176 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 177 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 295, 14 lines modified | Offset 295, 18 lines modified | ||
| 295 | ············_\x8i_\x8s_\x8m······1446 | 295 | ············_\x8i_\x8s_\x8m······1446 |
| 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 297 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 297 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 298 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 298 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 300 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 300 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 301 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 301 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | [customizations] | ||
| 304 | fips·=·true | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | 306 | #·Remediation·is·applicable·only·in·certain·platforms |
| 304 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 307 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 305 | var_system_crypto_policy='FIPS:OSPP' | 308 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 429, 18 lines modified | Offset 433, 14 lines modified | ||
| 429 | ··-·NIST-800-53-SC-13 | 433 | ··-·NIST-800-53-SC-13 |
| 430 | ··-·enable_fips_mode | 434 | ··-·enable_fips_mode |
| 431 | ··-·high_severity | 435 | ··-·high_severity |
| 432 | ··-·medium_complexity | 436 | ··-·medium_complexity |
| 433 | ··-·medium_disruption | 437 | ··-·medium_disruption |
| 434 | ··-·reboot_required | 438 | ··-·reboot_required |
| 435 | ··-·restrict_strategy | 439 | ··-·restrict_strategy |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | [customizations] | ||
| 438 | fips·=·true | ||
| 439 | Group ·System·Cryptographic·Policies· Group·contains·8·rules | 440 | Group ·System·Cryptographic·Policies· Group·contains·8·rules |
| 440 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 441 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 441 | ····*·GnuTLS·library | 442 | ····*·GnuTLS·library |
| 442 | ····*·OpenSSL·library | 443 | ····*·OpenSSL·library |
| 443 | ····*·NSS·library | 444 | ····*·NSS·library |
| 444 | ····*·OpenJDK | 445 | ····*·OpenJDK |
| 445 | ····*·Libkrb5 | 446 | ····*·Libkrb5 |
| Offset 451, 14 lines modified | Offset 451, 19 lines modified | ||
| 451 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 451 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 452 | $·sudo·yum·install·crypto-policies | 452 | $·sudo·yum·install·crypto-policies |
| 453 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 453 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 454 | Severity: ··medium | 454 | Severity: ··medium |
| 455 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 455 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 456 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 456 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 457 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 457 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 158548/166216 bytes (95.39%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037e00:·2d32·3 | 00037e00:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19092, 274 lines modified | Offset 19092, 274 lines modified | ||
| 0004a930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004a930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004a940:·2369·646d·3130·3132·3422·2074·6162·696e··#idm10124"·tabin | 0004a940:·2369·646d·3130·3132·3422·2074·6162·696e··#idm10124"·tabin | ||
| 0004a950:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0004a950:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a960:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0004a960:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a970:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0004a970:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a980:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0004a980:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0004a990:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0004a990:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a9a0:·3e52·656d·6564·6961·7469·6f6e·20 | 0004a9a0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0004a9b0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0004a9c0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a9d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0004a9e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0004a9f0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 0004a9b0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0004a9c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004a9d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004a9e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004a9f0:·6d31·3031·3234·223e·3c74·6162·6c65·2063··m10124"><table·c | |||
| 0004aa00:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0004aa10:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0004aa20:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0004aa30:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0004aa40:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0004aa50:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004aa60:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004aa70:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0004aa80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004aa90:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0004aaa0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0004aab0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0004aac0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0004aad0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0004aa | 0004aa00:·3132·3422·3e3c·7072·653e·3c63·6f64·653e··124"><pre><code> | ||
| 0004aa10:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0004aa20:·6d65·203d·2022·7265·6172·220a·7665·7273··me·=·"rear".vers | |||
| 0004aa30:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0004aa40:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004aa50:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004aa60:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004aa70:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004aa80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004aa90:·3130·3132·3522·2074·6162·696e·6465·783d··10125"·tabindex= | |||
| 0004aaa0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004aab0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004aac0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004aad0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004aae0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004aaf0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0004ab00:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0004ab10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004ab20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004ab30:·6170·7365·2220·6964·3d22·6964·6d31·3031··apse"·id="idm101 | |||
| 0004ab40:·3235·223e·3c74·6162·6c65·2063·6c61·7373··25"><table·class | |||
| 0004ab50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0004ab60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0004ab70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0004ab80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0004ab90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0004aba0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004abb0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004abc0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0004abd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004abe0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0004abf0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0004ac00:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0004ac10:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0004ac20:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0004ac30:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0004a | 0004ac40:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0004a | 0004ac50:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0004a | 0004ac60:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0004a | 0004ac70:·730a·6966·2021·2028·2028·2028·2067·7265··s.if·!·(·(·(·gre | ||
| 0004a | 0004ac80:·7020·2d71·2061·6172·6368·3634·202f·7072··p·-q·aarch64·/pr | ||
| 0004a | 0004ac90:·6f63·2f73·7973·2f6b·6572·6e65·6c2f·6f73··oc/sys/kernel/os | ||
| 0004ab50:·6c2f·6f73·7265·6c65·6173·6520·2661·6d70··l/osrelease·& | |||
| 0004ab60:·3b26·616d·703b·2067·7265·7020·2d71·5020··;&·grep·-qP· | |||
| 0004ab70:·225e·4944·3d5b·5c22·275d·3f6f·6c5b·5c22··"^ID=[\"']?ol[\" | |||
| 0004ab80:·275d·3f24·2220·222f·6574·632f·6f73·2d72··']?$"·"/etc/os-r | |||
| 0004a | 0004aca0:·7265·6c65·6173·6520·2661·6d70·3b26·616d··release·&&am | ||
| 0004aba0:·703b·207b·2072·6561·6c3d·2224·2867·7265··p;·{·real="$(gre | |||
| 0004abb0:·7020·2d50·2022·5e56·4552·5349·4f4e·5f49··p·-P·"^VERSION_I | |||
| 0004abc0:·443d·5b5c·2227·5d3f·5b5c·772e·5d2b·5b5c··D=[\"']?[\w.]+[\ | |||
| 0004abd0:·2227·5d3f·2422·202f·6574·632f·6f73·2d72··"']?$"·/etc/os-r | |||
| 0004abe0:·656c·6561·7365·207c·2073·6564·2022·732f··elease·|·sed·"s/ | |||
| 0004abf0:·5e56·4552·5349·4f4e·5f49·443d·5b5c·2227··^VERSION_ID=[\"' | |||
| 0004ac00:·5d5c·3f5c·285b·5e5c·2227·5d5c·2b5c·295b··]\?\([^\"']\+\)[ | |||
| 0004ac10:·5c22·275d·5c3f·242f·5c31·2f22·2922·3b20··\"']\?$/\1/")";· | |||
| 0004ac20:·6578·7065·6374·6564·3d22·392e·3022·3b20··expected="9.0";· | |||
| 0004ac30:·7072·696e·7466·2022·2573·5c6e·2573·2220··printf·"%s\n%s"· | |||
| 0004ac40:·2224·6578·7065·6374·6564·2220·2224·7265··"$expected"·"$re | |||
| 0004ac50:·616c·2220·7c20·736f·7274·202d·5643·3b20··al"·|·sort·-VC;· | |||
| 0004ac60:·7d20·2920·7c7c·2028·2067·7265·7020·2d71··}·)·||·(·grep·-q | |||
| 0004ac70:·2061·6172·6368·3634·202f·7072·6f63·2f73···aarch64·/proc/s | |||
| 0004ac80:·7973·2f6b·6572·6e65·6c2f·6f73·7265·6c65··ys/kernel/osrele | |||
| 0004ac90:·6173·6520·2661·6d70·3b26·616d·703b·2067··ase·&&·g | |||
| 0004aca0:·7265·7020·2d71·5020·225e·4944·3d5b·5c22··rep·-qP·"^ID=[\" | |||
| 0004acb0:·275d·3f72·6865·6c5b·5c22·275d·3f24·2220··']?rhel[\"']?$"· | |||
| 0004acc0:·222f·6574·632f·6f73·2d72·656c·6561·7365··"/etc/os-release | |||
| 0004acd0:·2220·2661·6d70·3b26·616d·703b·207b·2072··"·&&·{·r | |||
| 0004ace0:·6561·6c3d·2224·2867·7265·7020·2d50·2022··eal="$(grep·-P·" | |||
| 0004acf0:·5e56·4552·5349·4f4e·5f49·443d·5b5c·2227··^VERSION_ID=[\"' | |||
| 0004ad00:·5d3f·5b5c·772e·5d2b·5b5c·2227·5d3f·2422··]?[\w.]+[\"']?$" | |||
| 0004ad10:·202f·6574·632f·6f73·2d72·656c·6561·7365···/etc/os-release | |||
| 0004ad20:·207c·2073·6564·2022·732f·5e56·4552·5349···|·sed·"s/^VERSI | |||
| 0004ad30:·4f4e·5f49·443d·5b5c·2227·5d5c·3f5c·285b··ON_ID=[\"']\?\([ | |||
| 0004ad40:·5e5c·2227·5d5c·2b5c·295b·5c22·275d·5c3f··^\"']\+\)[\"']\? | |||
| 0004ad50:·242f·5c31·2f22·2922·3b20·6578·7065·6374··$/\1/")";·expect | |||
| 0004ad60:·6564·3d22·392e·3022·3b20·7072·696e·7466··ed="9.0";·printf | |||
| 0004ad70:·2022·2573·5c6e·2573·2220·2224·6578·7065···"%s\n%s"·"$expe | |||
| 0004ad80:·6374·6564·2220·2224·7265·616c·2220·7c20··cted"·"$real"·|· | |||
| Max diff block lines reached; 597267/634995 bytes (94.06%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:8 | 45 | ····*·cpe:/o:oracle:linux:8 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 967, 14 lines modified | Offset 967, 19 lines modified | ||
| 967 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 967 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 968 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 968 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 969 | The·rear·package·can·be·installed·with·the·following·command: | 969 | The·rear·package·can·be·installed·with·the·following·command: |
| 970 | $·sudo·yum·install·rear | 970 | $·sudo·yum·install·rear |
| 971 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 971 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 972 | Severity: ·medium | 972 | Severity: ·medium |
| 973 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 973 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 974 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 975 | [[packages]] | ||
| 976 | name·=·"rear" | ||
| 977 | version·=·"*" | ||
| 974 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 975 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 979 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 976 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 980 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 977 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 981 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 978 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 982 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 979 | #·Remediation·is·applicable·only·in·certain·platforms | 983 | #·Remediation·is·applicable·only·in·certain·platforms |
| 980 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 984 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1003, 38 lines modified | Offset 1008, 33 lines modified | ||
| 1003 | ··tags: | 1008 | ··tags: |
| 1004 | ··-·enable_strategy | 1009 | ··-·enable_strategy |
| 1005 | ··-·low_complexity | 1010 | ··-·low_complexity |
| 1006 | ··-·low_disruption | 1011 | ··-·low_disruption |
| 1007 | ··-·medium_severity | 1012 | ··-·medium_severity |
| 1008 | ··-·no_reboot_needed | 1013 | ··-·no_reboot_needed |
| 1009 | ··-·package_rear_installed | 1014 | ··-·package_rear_installed |
| 1010 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1011 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1012 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1013 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1014 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1015 | package·--add=rear | ||
| 1016 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1017 | [[packages]] | ||
| 1018 | name·=·"rear" | ||
| 1019 | version·=·"*" | ||
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1015 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1021 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1016 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1022 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1017 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1023 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1018 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1024 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1019 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1025 | include·install_rear | 1020 | include·install_rear |
| 1026 | class·install_rear·{ | 1021 | class·install_rear·{ |
| 1027 | ··package·{·'rear': | 1022 | ··package·{·'rear': |
| 1028 | ····ensure·=>·'installed', | 1023 | ····ensure·=>·'installed', |
| 1029 | ··} | 1024 | ··} |
| 1030 | } | 1025 | } |
| 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1031 | package·--add=rear | ||
| 1031 | Group ·Updating·Software· Group·contains·6·rules | 1032 | Group ·Updating·Software· Group·contains·6·rules |
| 1032 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 1033 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 1033 | Oracle·Linux·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 1034 | Oracle·Linux·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 1034 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1035 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1035 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | 1036 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. |
| Offset 1601, 38 lines modified | Offset 1601, 14 lines modified | ||
| 1601 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1601 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1602 | fi | 1602 | fi |
| 1603 | fi | 1603 | fi |
| 1604 | else | 1604 | else |
| 1605 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1605 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1606 | fi | 1606 | fi |
| 1607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1608 | --- | ||
| 1609 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1610 | kind:·MachineConfig | ||
| 1611 | spec: | ||
| 1612 | ··config: | ||
| 1613 | ····ignition: | ||
| 1614 | ······version:·3.1.0 | ||
| 1615 | ····storage: | ||
| 1616 | ······files: | ||
| 1617 | ······-·contents: | ||
| 1618 | ··········source: | ||
| 1619 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1620 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1621 | ········mode:·0644 | ||
| 1622 | ········path:·/etc/pam.d/password-auth | ||
| 1623 | ········overwrite:·true | ||
| 1624 | ······-·contents: | ||
| 1625 | ··········source: | ||
| 1626 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1627 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1628 | ········mode:·0644 | ||
| 1629 | ········path:·/etc/pam.d/system-auth | ||
| 1630 | ········overwrite:·true | ||
| 1631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1634 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1635 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1636 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1612 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1637 | ····authselect | 1613 | ····authselect |
| Offset 1754, 14 lines modified | Offset 1730, 38 lines modified | ||
| 1754 | ··-·PCI-DSSv4-8.3.1 | 1730 | ··-·PCI-DSSv4-8.3.1 |
| 1755 | ··-·configure_strategy | 1731 | ··-·configure_strategy |
| 1756 | ··-·high_severity | 1732 | ··-·high_severity |
| 1757 | ··-·low_complexity | 1733 | ··-·low_complexity |
| 1758 | ··-·medium_disruption | 1734 | ··-·medium_disruption |
| 1759 | ··-·no_empty_passwords | 1735 | ··-·no_empty_passwords |
| Max diff block lines reached; 56189/70998 bytes (79.14%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 21304, 287 lines modified | Offset 21304, 287 lines modified | ||
| 00053370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00053370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00053380:·3d22·2369·646d·3134·3038·3122·2074·6162··="#idm14081"·tab | 00053380:·3d22·2369·646d·3134·3038·3122·2074·6162··="#idm14081"·tab | ||
| 00053390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00053390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 000533a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 000533a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 000533b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 000533b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 000533c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 000533c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 000533d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 000533d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 000533e0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 000533e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 000533f0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00053400:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00053410:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00053420:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00053430:·6964·6d31·3430·3831·223e·3c74·6162·6c65··idm14081"><table | |||
| 00053440:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00053450:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00053460:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00053470:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00053480:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00053490:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000534a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000534b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000534c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000534d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000534e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 000534f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00053500:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | |||
| 00053510:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | |||
| 00053520:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00053530:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 00053540:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 00053550:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 00053560:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 00053570:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 00053580:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 00053590:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 000535a0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a53··erenv·];·then..S | |||
| 000535b0:·5953·5445·4d43·544c·5f45·5845·433d·272f··YSTEMCTL_EXEC='/ | |||
| 00053 | 000533f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 00053400:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00053410:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00053420:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00053430:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00053440:·3134·3038·3122·3e3c·7072·653e·3c63·6f64··14081"><pre><cod | |||
| 00053450:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 00053460:·6e73·2e73·6572·7669·6365·735d·0a6d·6173··ns.services].mas | |||
| 00053470:·6b65·6420·3d20·5b22·6465·6275·672d·7368··ked·=·["debug-sh | |||
| 00053480:·656c·6c22·5d0a·3c2f·636f·6465·3e3c·2f70··ell"].</code></p | |||
| 00053490:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000534a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 000534b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 000534c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 000534d0:·7461·7267·6574·3d22·2369·646d·3134·3038··target="#idm1408 | |||
| 000534e0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 000534f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00053500:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00053510:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00053520:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00053530:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00053540:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00053550:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00053560:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00053570:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00053580:·2220·6964·3d22·6964·6d31·3430·3832·223e··"·id="idm14082"> | |||
| 00053590:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000535a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000535b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000535c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000535d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000535e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000535f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00053600:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00053610:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00053620:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00053630:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00053640:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00053650:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00053660:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | |||
| 00053670:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00053680:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 00053690:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 000536a0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 000536b0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 000536c0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 000536d0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 000536e0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 000536f0:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 00053 | 00053700:·6865·6e0a·0a53·5953·5445·4d43·544c·5f45··hen..SYSTEMCTL_E | ||
| 000535e0:·5845·4322·2073·746f·7020·2764·6562·7567··XEC"·stop·'debug | |||
| 00053 | 00053710:·5845·433d·272f·7573·722f·6269·6e2f·7379··XEC='/usr/bin/sy | ||
| 00053720:·7374·656d·6374·6c27·0a22·2453·5953·5445··stemctl'."$SYSTE | |||
| 00053730:·4d43·544c·5f45·5845·4322·2073·746f·7020··MCTL_EXEC"·stop· | |||
| 00053740:·2764·6562·7567·2d73·6865·6c6c·2e73·6572··'debug-shell.ser | |||
| 00053750:·7669·6365·270a·2224·5359·5354·454d·4354··vice'."$SYSTEMCT | |||
| 00053760:·4c5f·4558·4543·2220·6469·7361·626c·6520··L_EXEC"·disable· | |||
| 00053770:·2764·6562·7567·2d73·6865·6c6c·2e73·6572··'debug-shell.ser | |||
| 00053780:·7669·6365·270a·2224·5359·5354·454d·4354··vice'."$SYSTEMCT | |||
| 00053790:·4c5f·4558·4543·2220·6d61·736b·2027·6465··L_EXEC"·mask·'de | |||
| 000537a0:·6275·672d·7368·656c·6c2e·7365·7276·6963··bug-shell.servic | |||
| 000537b0:·6527·0a23·2044·6973·6162·6c65·2073·6f63··e'.#·Disable·soc | |||
| 000537c0:·6b65·7420·6163·7469·7661·7469·6f6e·2069··ket·activation·i | |||
| 000537d0:·6620·7765·2068·6176·6520·6120·756e·6974··f·we·have·a·unit | |||
| 000537e0:·2066·696c·6520·666f·7220·6974·0a69·6620···file·for·it.if· | |||
| 00053 | 000537f0:·2224·5359·5354·454d·4354·4c5f·4558·4543··"$SYSTEMCTL_EXEC | ||
| 00053610:·2220·6469·7361·626c·6520·2764·6562·7567··"·disable·'debug | |||
| 00053 | 00053800:·2220·2d71·206c·6973·742d·756e·6974·2d66··"·-q·list-unit-f | ||
| 00053810:·696c·6573·2064·6562·7567·2d73·6865·6c6c··iles·debug-shell | |||
| 00053820:·2e73·6f63·6b65·743b·2074·6865·6e0a·2020··.socket;·then.·· | |||
| 00053 | 00053830:·2020·2224·5359·5354·454d·4354·4c5f·4558····"$SYSTEMCTL_EX | ||
| 00053840:·4543·2220·7374·6f70·2027·6465·6275·672d··EC"·stop·'debug- | |||
| 00053850:·7368·656c·6c2e·736f·636b·6574·270a·2020··shell.socket'.·· | |||
| 00053860:·2020·2224·5359·5354·454d·4354·4c5f·4558····"$SYSTEMCTL_EX | |||
| Max diff block lines reached; 541497/580881 bytes (93.22%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:8 | 50 | ····*·cpe:/o:oracle:linux:8 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1342, 14 lines modified | Offset 1342, 18 lines modified | ||
| 1342 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1342 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1343 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1343 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1344 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1344 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1345 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1345 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1346 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1346 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1347 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-040180 | 1347 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-040180 |
| 1348 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248872r991589_rule | 1348 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248872r991589_rule |
| 1349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1350 | [customizations.services] | ||
| 1351 | masked·=·["debug-shell"] | ||
| 1349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1354 | #·Remediation·is·applicable·only·in·certain·platforms | 1357 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1355 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1358 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1448, 18 lines modified | Offset 1452, 14 lines modified | ||
| 1448 | ··-·NIST-800-53-CM-6 | 1452 | ··-·NIST-800-53-CM-6 |
| 1449 | ··-·disable_strategy | 1453 | ··-·disable_strategy |
| 1450 | ··-·low_complexity | 1454 | ··-·low_complexity |
| 1451 | ··-·low_disruption | 1455 | ··-·low_disruption |
| 1452 | ··-·medium_severity | 1456 | ··-·medium_severity |
| 1453 | ··-·no_reboot_needed | 1457 | ··-·no_reboot_needed |
| 1454 | ··-·service_debug-shell_disabled | 1458 | ··-·service_debug-shell_disabled |
| 1455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1456 | [customizations.services] | ||
| 1457 | masked·=·["debug-shell"] | ||
| 1458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1463 | include·disable_debug-shell | 1464 | include·disable_debug-shell |
| Offset 1907, 38 lines modified | Offset 1907, 14 lines modified | ||
| 1907 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1907 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1908 | fi | 1908 | fi |
| 1909 | fi | 1909 | fi |
| 1910 | else | 1910 | else |
| 1911 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1911 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1912 | fi | 1912 | fi |
| 1913 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1914 | --- | ||
| 1915 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1916 | kind:·MachineConfig | ||
| 1917 | spec: | ||
| 1918 | ··config: | ||
| 1919 | ····ignition: | ||
| 1920 | ······version:·3.1.0 | ||
| 1921 | ····storage: | ||
| 1922 | ······files: | ||
| 1923 | ······-·contents: | ||
| 1924 | ··········source: | ||
| 1925 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1926 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1927 | ········mode:·0644 | ||
| 1928 | ········path:·/etc/pam.d/password-auth | ||
| 1929 | ········overwrite:·true | ||
| 1930 | ······-·contents: | ||
| 1931 | ··········source: | ||
| 1932 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1933 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1934 | ········mode:·0644 | ||
| 1935 | ········path:·/etc/pam.d/system-auth | ||
| 1936 | ········overwrite:·true | ||
| 1937 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1913 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1938 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1914 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1939 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1915 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1940 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1916 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1941 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1917 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1942 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1918 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1943 | ····authselect | 1919 | ····authselect |
| Offset 2060, 14 lines modified | Offset 2036, 38 lines modified | ||
| 2060 | ··-·PCI-DSSv4-8.3.1 | 2036 | ··-·PCI-DSSv4-8.3.1 |
| 2061 | ··-·configure_strategy | 2037 | ··-·configure_strategy |
| 2062 | ··-·high_severity | 2038 | ··-·high_severity |
| 2063 | ··-·low_complexity | 2039 | ··-·low_complexity |
| 2064 | ··-·medium_disruption | 2040 | ··-·medium_disruption |
| 2065 | ··-·no_empty_passwords | 2041 | ··-·no_empty_passwords |
| 2066 | ··-·no_reboot_needed | 2042 | ··-·no_reboot_needed |
| 2043 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2044 | --- | ||
| 2045 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2046 | kind:·MachineConfig | ||
| 2047 | spec: | ||
| 2048 | ··config: | ||
| 2049 | ····ignition: | ||
| 2050 | ······version:·3.1.0 | ||
| 2051 | ····storage: | ||
| 2052 | ······files: | ||
| 2053 | ······-·contents: | ||
| 2054 | ··········source: | ||
| 2055 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2056 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2057 | ········mode:·0644 | ||
| 2058 | ········path:·/etc/pam.d/password-auth | ||
| 2059 | ········overwrite:·true | ||
| 2060 | ······-·contents: | ||
| 2061 | ··········source: | ||
| 2062 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2063 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2064 | ········mode:·0644 | ||
| 2065 | ········path:·/etc/pam.d/system-auth | ||
| 2066 | ········overwrite:·true | ||
| 2067 | Group ·Restrict·Root·Logins· Group·contains·3·rules | 2067 | Group ·Restrict·Root·Logins· Group·contains·3·rules |
| 2068 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. | 2068 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. |
| 2069 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2069 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 36785/59823 bytes (61.49%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 203 lines modified | Offset 15073, 203 lines modified | ||
| 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ae80:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003ae90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003aea0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003aeb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003aec0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae80:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003ae90:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003aea0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aeb0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003aec0:·6964·6d35·3638·3422·3e3c·7461·626c·6520··idm5684"><table· | |||
| 0003aed0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003aee0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003aef0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003af00:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003af10:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003af20:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003af30:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003af40:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003af50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af60:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003af70:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003af80:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003af90:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003afa0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003a | 0003aed0:·3536·3834·223e·3c70·7265·3e3c·636f·6465··5684"><pre><code | ||
| 0003aee0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003aef0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003af00:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003afc0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003afd0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003afe0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003aff0:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b000:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003b010:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003b020:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003b030:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003b040:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003b050:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003b060:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 0003b070:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003b080:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b090:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b0a0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b0b0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b0c0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003 | 0003af10:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003 | 0003af20:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003 | 0003af30:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003af40:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003af50:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003af60:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003af70:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003af80:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003af90:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003afa0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003afb0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003afc0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003afd0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003afe0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003aff0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b000:·6170·7365·2220·6964·3d22·6964·6d35·3638··apse"·id="idm568 | |||
| 0003b010:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b020:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b030:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b040:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b050:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b060:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b070:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b080:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b090:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b0b0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b0c0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0d0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0e0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0f0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b100:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b110:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b120:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b130:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b140:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003b150:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003b160:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003b170:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003b180:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003b190:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003b1a0:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 0003b1b0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b1c0:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003b1d0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b1e0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b1f0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b200:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b210:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b220:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b230:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b240:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b250:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b260:·6172·6765·743d·2223·6964·6d35·3638·3622··arget="#idm5686" | |||
| 0003b270:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b280:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b290:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| Max diff block lines reached; 1245986/1273778 bytes (97.82%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 19 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | #·Remediation·is·applicable·only·in·certain·platforms | 117 | #·Remediation·is·applicable·only·in·certain·platforms |
| 114 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 118 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 138, 38 lines modified | Offset 143, 33 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 143 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 144 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 145 | ··-·low_complexity |
| 141 | ··-·low_disruption | 146 | ··-·low_disruption |
| 142 | ··-·medium_severity | 147 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 148 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 149 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package·--add=aide | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | include·install_aide | 155 | include·install_aide |
| 161 | class·install_aide·{ | 156 | class·install_aide·{ |
| 162 | ··package·{·'aide': | 157 | ··package·{·'aide': |
| 163 | ····ensure·=>·'installed', | 158 | ····ensure·=>·'installed', |
| 164 | ··} | 159 | ··} |
| 165 | } | 160 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·--add=aide | ||
| 166 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 167 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 167 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 168 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 168 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 169 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 169 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 170 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 288, 14 lines modified | Offset 288, 18 lines modified | ||
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 294 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 294 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 296 | [customizations] | ||
| 297 | fips·=·true | ||
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 296 | #·Remediation·is·applicable·only·in·certain·platforms | 299 | #·Remediation·is·applicable·only·in·certain·platforms |
| 297 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 300 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 298 | var_system_crypto_policy='FIPS:OSPP' | 301 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 422, 18 lines modified | Offset 426, 14 lines modified | ||
| 422 | ··-·NIST-800-53-SC-13 | 426 | ··-·NIST-800-53-SC-13 |
| 423 | ··-·enable_fips_mode | 427 | ··-·enable_fips_mode |
| 424 | ··-·high_severity | 428 | ··-·high_severity |
| 425 | ··-·medium_complexity | 429 | ··-·medium_complexity |
| 426 | ··-·medium_disruption | 430 | ··-·medium_disruption |
| 427 | ··-·reboot_required | 431 | ··-·reboot_required |
| 428 | ··-·restrict_strategy | 432 | ··-·restrict_strategy |
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 430 | [customizations] | ||
| 431 | fips·=·true | ||
| 432 | Group ·System·Cryptographic·Policies· Group·contains·8·rules | 433 | Group ·System·Cryptographic·Policies· Group·contains·8·rules |
| 433 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 434 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 434 | ····*·GnuTLS·library | 435 | ····*·GnuTLS·library |
| 435 | ····*·OpenSSL·library | 436 | ····*·OpenSSL·library |
| 436 | ····*·NSS·library | 437 | ····*·NSS·library |
| 437 | ····*·OpenJDK | 438 | ····*·OpenJDK |
| 438 | ····*·Libkrb5 | 439 | ····*·Libkrb5 |
| Offset 444, 14 lines modified | Offset 444, 19 lines modified | ||
| 444 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 444 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 445 | $·sudo·yum·install·crypto-policies | 445 | $·sudo·yum·install·crypto-policies |
| 446 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 446 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 447 | Severity: ··medium | 447 | Severity: ··medium |
| 448 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 448 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 449 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 449 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 450 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 450 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 158548/166263 bytes (95.36%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16398, 202 lines modified | Offset 16398, 202 lines modified | ||
| 000400d0:·7267·6574·3d22·2369·646d·3536·3834·2220··rget="#idm5684"· | 000400d0:·7267·6574·3d22·2369·646d·3536·3834·2220··rget="#idm5684"· | ||
| 000400e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 000400e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 000400f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 000400f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00040100:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00040100:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00040110:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00040110:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00040120:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00040120:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00040130:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00040130:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00040140:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00040140:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 00040150:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040160:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040170:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040180:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 00040190:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 000401a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 000401b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 000401c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 000401d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 000401e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000401f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00040200:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00040210:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040220:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040230:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00040240:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00040250:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00040260:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00040270:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00040280:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 00040290:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 000402a0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 000402b0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 000402c0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 000402d0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 000402e0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 000402f0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 00040300:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 00040310:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 00040320:·6e0a·2020·2020·7975·6d20·696e·7374·616c··n.····yum·instal | |||
| 00040330:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 00040340:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 00040350:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 00040360:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 00040370:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 00040380:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 00040390:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000403a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000403b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 000403c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 000403d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 000403e0:·2369·646d·3536·3835·2220·7461·6269·6e64··#idm5685"·tabind | |||
| 000403f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00040400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00040410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00040420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00040430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00040440:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00040 | 00040150:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 00040 | 00040160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00040 | 00040170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00040 | 00040180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00040190:·6964·6d35·3638·3422·3e3c·7072·653e·3c63··idm5684"><pre><c | |||
| 00040490:·6964·6d35·3638·3522·3e3c·7461·626c·6520··idm5685"><table· | |||
| 000404a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000404b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000404c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000404d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000404e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 000404f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040500:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00040510:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040520:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040530:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040540:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040550:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040560:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00040570:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040580:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040590:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 000405a0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 000405b0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 000405c0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 000405d0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 000405e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 000405f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00040600:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00040610:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00040620:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00040630:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00040640:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 00040650:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00040660:·5354·4947·2d4f·4c30·382d·3030·2d30·3130··STIG-OL08-00-010 | |||
| 00040670:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 00040680:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00040690:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 000406a0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 000406b0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 000406c0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 000406d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 000406e0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 000406f0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00040700:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00040710:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00040720:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 00040730:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00040740:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040750:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040760:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040770:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00040780:·7267·6574·3d22·2369·646d·3536·3836·2220··rget="#idm5686"· | |||
| 00040790:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| Max diff block lines reached; 677910/705564 bytes (96.08%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 411, 14 lines modified | Offset 411, 19 lines modified | ||
| 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 414 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 414 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 415 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 415 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 416 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 416 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 417 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 417 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | [[packages]] | ||
| 420 | name·=·"aide" | ||
| 421 | version·=·"*" | ||
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 423 | #·Remediation·is·applicable·only·in·certain·platforms | 427 | #·Remediation·is·applicable·only·in·certain·platforms |
| 424 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 428 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 448, 38 lines modified | Offset 453, 33 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 453 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·enable_strategy | 454 | ··-·enable_strategy |
| 450 | ··-·low_complexity | 455 | ··-·low_complexity |
| 451 | ··-·low_disruption | 456 | ··-·low_disruption |
| 452 | ··-·medium_severity | 457 | ··-·medium_severity |
| 453 | ··-·no_reboot_needed | 458 | ··-·no_reboot_needed |
| 454 | ··-·package_aide_installed | 459 | ··-·package_aide_installed |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 460 | package·--add=aide | ||
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 462 | [[packages]] | ||
| 463 | name·=·"aide" | ||
| 464 | version·=·"*" | ||
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 470 | include·install_aide | 465 | include·install_aide |
| 471 | class·install_aide·{ | 466 | class·install_aide·{ |
| 472 | ··package·{·'aide': | 467 | ··package·{·'aide': |
| 473 | ····ensure·=>·'installed', | 468 | ····ensure·=>·'installed', |
| 474 | ··} | 469 | ··} |
| 475 | } | 470 | } |
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 476 | package·--add=aide | ||
| 476 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 477 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 477 | Run·the·following·command·to·generate·a·new·database: | 478 | Run·the·following·command·to·generate·a·new·database: |
| 478 | $·sudo·/usr/sbin/aide·--init | 479 | $·sudo·/usr/sbin/aide·--init |
| 479 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 480 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 480 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 481 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 481 | To·initiate·a·manual·check,·run·the·following·command: | 482 | To·initiate·a·manual·check,·run·the·following·command: |
| 482 | $·sudo·/usr/sbin/aide·--check | 483 | $·sudo·/usr/sbin/aide·--check |
| Offset 2513, 14 lines modified | Offset 2513, 19 lines modified | ||
| 2513 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 2513 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 2514 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2514 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2515 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2515 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2516 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2516 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2517 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2517 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2518 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2518 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2519 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2519 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2521 | [[packages]] | ||
| 2522 | name·=·"sudo" | ||
| 2523 | version·=·"*" | ||
| 2520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2525 | #·Remediation·is·applicable·only·in·certain·platforms | 2529 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2526 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2530 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2547, 38 lines modified | Offset 2552, 33 lines modified | ||
| 2547 | ··-·PCI-DSSv4-2.2.6 | 2552 | ··-·PCI-DSSv4-2.2.6 |
| 2548 | ··-·enable_strategy | 2553 | ··-·enable_strategy |
| 2549 | ··-·low_complexity | 2554 | ··-·low_complexity |
| 2550 | ··-·low_disruption | 2555 | ··-·low_disruption |
| 2551 | ··-·medium_severity | 2556 | ··-·medium_severity |
| 2552 | ··-·no_reboot_needed | 2557 | ··-·no_reboot_needed |
| 2553 | ··-·package_sudo_installed | 2558 | ··-·package_sudo_installed |
| 2554 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2555 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2556 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2557 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2558 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2559 | package·--add=sudo | ||
| 2560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2561 | [[packages]] | ||
| 2562 | name·=·"sudo" | ||
| 2563 | version·=·"*" | ||
| 2564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2569 | include·install_sudo | 2564 | include·install_sudo |
| Max diff block lines reached; 78806/84650 bytes (93.10%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d40:·2d3 | 00037d40:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 21407, 834 lines modified | Offset 21407, 834 lines modified | ||
| 000539e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 000539e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 000539f0:·3136·3432·3022·2074·6162·696e·6465·783d··16420"·tabindex= | 000539f0:·3136·3432·3022·2074·6162·696e·6465·783d··16420"·tabindex= | ||
| 00053a00:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00053a00:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00053a10:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00053a10:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00053a20:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00053a20:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00053a30:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00053a30:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00053a40:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00053a40:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00053a50:·6564·6961·7469·6f6e·204 | 00053a50:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 00053a60:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 00053a70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00053a80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00053a90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00053aa0:·6964·6d31·3634·3230·223e·3c70·7265·3e3c··idm16420"><pre>< | |||
| 00053ab0:·636f·6465·3e2d·2d2d·0a61·7069·5665·7273··code>---.apiVers | |||
| 00053ac0:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | |||
| 00053ad0:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | |||
| 00053ae0:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | |||
| 00053af0:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | |||
| 00053b00:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | |||
| 00053b10:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | |||
| 00053b20:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | |||
| 00053b30:·0a20·2020·2073·746f·7261·6765·3a0a·2020··.····storage:.·· | |||
| 00053b40:·2020·2020·6669·6c65·733a·0a20·2020·2020······files:.····· | |||
| 00053b50:·202d·2063·6f6e·7465·6e74·733a·0a20·2020···-·contents:.··· | |||
| 00053b60:·2020·2020·2020·2073·6f75·7263·653a·2064·········source:·d | |||
| 00053b70:·6174·613a·2c25·3233·2532·3047·656e·6572··ata:,%23%20Gener | |||
| 00053b80:·6174·6564·2532·3062·7925·3230·6175·7468··ated%20by%20auth | |||
| 00053b90:·7365·6c65·6374·2532·306f·6e25·3230·5361··select%20on%20Sa | |||
| 00053ba0:·7425·3230·4f63·7425·3230·3237·2532·3031··t%20Oct%2027%201 | |||
| 00053bb0:·3425·3341·3539·2533·4133·3625·3230·3230··4%3A59%3A36%2020 | |||
| 00053bc0:·3138·2530·4125·3233·2532·3044·6f25·3230··18%0A%23%20Do%20 | |||
| 00053bd0:·6e6f·7425·3230·6d6f·6469·6679·2532·3074··not%20modify%20t | |||
| 00053be0:·6869·7325·3230·6669·6c65·2532·306d·616e··his%20file%20man | |||
| 00053bf0:·7561·6c6c·792e·2530·4125·3041·6175·7468··ually.%0A%0Aauth | |||
| 00053c00:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053c10:·3230·2532·3025·3230·7265·7175·6972·6564··20%20%20required | |||
| 00053c20:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053c30:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053c40:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053c50:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053c60:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053c70:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053c80:·2532·3025·3230·2532·3025·3230·2532·3070··%20%20%20%20%20p | |||
| 00053c90:·616d·5f65·6e76·2e73·6f25·3041·6175·7468··am_env.so%0Aauth | |||
| 00053ca0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053cb0:·3230·2532·3025·3230·7265·7175·6972·6564··20%20%20required | |||
| 00053cc0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053cd0:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053ce0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053cf0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053d00:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053d10:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053d20:·2532·3025·3230·2532·3025·3230·2532·3070··%20%20%20%20%20p | |||
| 00053d30:·616d·5f66·6169·6c64·656c·6179·2e73·6f25··am_faildelay.so% | |||
| 00053d40:·3230·6465·6c61·7925·3344·3230·3030·3030··20delay%3D200000 | |||
| 00053d50:·3025·3041·6175·7468·2532·3025·3230·2532··0%0Aauth%20%20%2 | |||
| 00053d60:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053d70:·7375·6666·6963·6965·6e74·2532·3025·3230··sufficient%20%20 | |||
| 00053d80:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053d90:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053da0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053db0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053dc0:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053dd0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053de0:·2532·3070·616d·5f66·7072·696e·7464·2e73··%20pam_fprintd.s | |||
| 00053df0:·6f25·3041·6175·7468·2532·3025·3230·2532··o%0Aauth%20%20%2 | |||
| 00053e00:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053e10:·2535·4264·6566·6175·6c74·2533·4431·2532··%5Bdefault%3D1%2 | |||
| 00053e20:·3069·676e·6f72·6525·3344·6967·6e6f·7265··0ignore%3Dignore | |||
| 00053e30:·2532·3073·7563·6365·7373·2533·446f·6b25··%20success%3Dok% | |||
| 00053e40:·3544·2532·3025·3230·2532·3025·3230·2532··5D%20%20%20%20%2 | |||
| 00053e50:·3025·3230·2532·3025·3230·2532·3070·616d··0%20%20%20%20pam | |||
| 00053e60:·5f73·7563·6365·6564·5f69·662e·736f·2532··_succeed_if.so%2 | |||
| 00053e70:·3075·6964·2532·3025·3345·2533·4425·3230··0uid%20%3E%3D%20 | |||
| 00053e80:·3130·3030·2532·3071·7569·6574·2530·4161··1000%20quiet%0Aa | |||
| 00053e90:·7574·6825·3230·2532·3025·3230·2532·3025··uth%20%20%20%20% | |||
| 00053ea0:·3230·2532·3025·3230·2532·3025·3542·6465··20%20%20%20%5Bde | |||
| 00053eb0:·6661·756c·7425·3344·3125·3230·6967·6e6f··fault%3D1%20igno | |||
| 00053ec0:·7265·2533·4469·676e·6f72·6525·3230·7375··re%3Dignore%20su | |||
| 00053ed0:·6363·6573·7325·3344·6f6b·2535·4425·3230··ccess%3Dok%5D%20 | |||
| 00053ee0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053ef0:·3230·2532·3025·3230·7061·6d5f·6c6f·6361··20%20%20pam_loca | |||
| 00053f00:·6c75·7365·722e·736f·2530·4161·7574·6825··luser.so%0Aauth% | |||
| 00053f10:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053f20:·3025·3230·2532·3073·7566·6669·6369·656e··0%20%20sufficien | |||
| 00053f30:·7425·3230·2532·3025·3230·2532·3025·3230··t%20%20%20%20%20 | |||
| 00053f40:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053f50:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053f60:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053f70:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053f80:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00053f90:·3025·3230·2532·3025·3230·7061·6d5f·756e··0%20%20%20pam_un | |||
| 00053fa0:·6978·2e73·6f25·3230·7472·795f·6669·7273··ix.so%20try_firs | |||
| 00053fb0:·745f·7061·7373·2530·4161·7574·6825·3230··t_pass%0Aauth%20 | |||
| 00053fc0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00053fd0:·3230·2532·3072·6571·7569·7369·7465·2532··20%20requisite%2 | |||
| 00053fe0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00053ff0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054000:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054010:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054020:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054030:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054040:·3025·3230·2532·3025·3230·7061·6d5f·7375··0%20%20%20pam_su | |||
| 00054050:·6363·6565·645f·6966·2e73·6f25·3230·7569··cceed_if.so%20ui | |||
| 00054060:·6425·3230·2533·4525·3344·2532·3031·3030··d%20%3E%3D%20100 | |||
| 00054070:·3025·3230·7175·6965·745f·7375·6363·6573··0%20quiet_succes | |||
| 00054080:·7325·3041·6175·7468·2532·3025·3230·2532··s%0Aauth%20%20%2 | |||
| 00054090:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 000540a0:·7375·6666·6963·6965·6e74·2532·3025·3230··sufficient%20%20 | |||
| 000540b0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| Max diff block lines reached; 385134/431832 bytes (89.19%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:8 | 42 | ····*·cpe:/o:oracle:linux:8 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1174, 38 lines modified | Offset 1174, 14 lines modified | ||
| 1174 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1174 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1175 | fi | 1175 | fi |
| 1176 | fi | 1176 | fi |
| 1177 | else | 1177 | else |
| 1178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1179 | fi | 1179 | fi |
| 1180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1181 | --- | ||
| 1182 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1183 | kind:·MachineConfig | ||
| 1184 | spec: | ||
| 1185 | ··config: | ||
| 1186 | ····ignition: | ||
| 1187 | ······version:·3.1.0 | ||
| 1188 | ····storage: | ||
| 1189 | ······files: | ||
| 1190 | ······-·contents: | ||
| 1191 | ··········source: | ||
| 1192 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1193 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1194 | ········mode:·0644 | ||
| 1195 | ········path:·/etc/pam.d/password-auth | ||
| 1196 | ········overwrite:·true | ||
| 1197 | ······-·contents: | ||
| 1198 | ··········source: | ||
| 1199 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1200 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1201 | ········mode:·0644 | ||
| 1202 | ········path:·/etc/pam.d/system-auth | ||
| 1203 | ········overwrite:·true | ||
| 1204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1209 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1185 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1210 | ····authselect | 1186 | ····authselect |
| Offset 1327, 14 lines modified | Offset 1303, 38 lines modified | ||
| 1327 | ··-·PCI-DSSv4-8.3.1 | 1303 | ··-·PCI-DSSv4-8.3.1 |
| 1328 | ··-·configure_strategy | 1304 | ··-·configure_strategy |
| 1329 | ··-·high_severity | 1305 | ··-·high_severity |
| 1330 | ··-·low_complexity | 1306 | ··-·low_complexity |
| 1331 | ··-·medium_disruption | 1307 | ··-·medium_disruption |
| 1332 | ··-·no_empty_passwords | 1308 | ··-·no_empty_passwords |
| 1333 | ··-·no_reboot_needed | 1309 | ··-·no_reboot_needed |
| 1310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1311 | --- | ||
| 1312 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1313 | kind:·MachineConfig | ||
| 1314 | spec: | ||
| 1315 | ··config: | ||
| 1316 | ····ignition: | ||
| 1317 | ······version:·3.1.0 | ||
| 1318 | ····storage: | ||
| 1319 | ······files: | ||
| 1320 | ······-·contents: | ||
| 1321 | ··········source: | ||
| 1322 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1323 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1324 | ········mode:·0644 | ||
| 1325 | ········path:·/etc/pam.d/password-auth | ||
| 1326 | ········overwrite:·true | ||
| 1327 | ······-·contents: | ||
| 1328 | ··········source: | ||
| 1329 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1330 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1331 | ········mode:·0644 | ||
| 1332 | ········path:·/etc/pam.d/system-auth | ||
| 1333 | ········overwrite:·true | ||
| 1334 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 1334 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 1335 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 1335 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 1336 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 1336 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 1337 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 1337 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 1338 | #·echo·$PATH | 1338 | #·echo·$PATH |
| 1339 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 1339 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1432, 14 lines modified | Offset 1432, 19 lines modified | ||
| 1432 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1432 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1435 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1435 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1437 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-030670 | 1437 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-030670 |
| 1438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248812r991589_rule | 1438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248812r991589_rule |
| 1439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1440 | [[packages]] | ||
| 1441 | name·=·"rsyslog" | ||
| 1442 | version·=·"*" | ||
| 1439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1444 | #·Remediation·is·applicable·only·in·certain·platforms | 1448 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1445 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1449 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1466, 38 lines modified | Offset 1471, 33 lines modified | ||
| 1466 | ··-·NIST-800-53-CM-6(a) | 1471 | ··-·NIST-800-53-CM-6(a) |
| 1467 | ··-·enable_strategy | 1472 | ··-·enable_strategy |
| 1468 | ··-·low_complexity | 1473 | ··-·low_complexity |
| 1469 | ··-·low_disruption | 1474 | ··-·low_disruption |
| 1470 | ··-·medium_severity | 1475 | ··-·medium_severity |
| 1471 | ··-·no_reboot_needed | 1476 | ··-·no_reboot_needed |
| 1472 | ··-·package_rsyslog_installed | 1477 | ··-·package_rsyslog_installed |
| 1473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 18407/40253 bytes (45.73%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2020·2861·7320·6f66·2032·3032·3 | 00037cc0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037cd0:·2d32·3 | 00037cd0:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15076, 203 lines modified | Offset 15076, 203 lines modified | ||
| 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aea0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003aea0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003aeb0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003aec0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aed0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aee0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aef0:·6d35·3638·3422·3e3c·7461·626c·6520·636c··m5684"><table·cl | |||
| 0003af00:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af10:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003af20:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003af30:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a | 0003aeb0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003aec0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aed0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aee0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003aef0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003af00:·3834·223e·3c70·7265·3e3c·636f·6465·3e0a··84"><pre><code>. | |||
| 0003af10:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003af20:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003af30:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003af40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003af50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003af60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003af70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003af80:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003af90:·3638·3522·2074·6162·696e·6465·783d·2230··685"·tabindex="0 | |||
| 0003afa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003afb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003afc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003afd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003afe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003aff0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b000:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b010:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b020:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b030:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 0003b040:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b050:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b060:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b070:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b080:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b090:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b0a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b0e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b0f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b100:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b110:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b120:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b130:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b140:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b150:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b160:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b170:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b180:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b190:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b1a0:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b1b0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b1c0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b1d0:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 0003b1e0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b1f0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b200:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b210:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b220:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b230:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b240:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b250:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b260:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b270:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b280:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b290:·6765·743d·2223·6964·6d35·3638·3622·2074··get="#idm5686"·t | |||
| 0003b2a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b2b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b2c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b2d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b2e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b2f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b300:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b310:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b320:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b330:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b340:·2069·643d·2269·646d·3536·3836·223e·3c74···id="idm5686"><t | |||
| 0003b350:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b360:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b370:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b380:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b390:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b3a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b3b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b3c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003 | 0003b3d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003af60:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003 | 0003b3e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b3f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003 | 0003b400:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003af90:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003afa0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003afb0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003afc0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003afd0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003afe0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| Max diff block lines reached; 1208481/1236411 bytes (97.74%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:8 | 41 | ····*·cpe:/o:oracle:linux:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 100, 14 lines modified | Offset 100, 19 lines modified | ||
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 104 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 104 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 106 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | [[packages]] | ||
| 109 | name·=·"aide" | ||
| 110 | version·=·"*" | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | 116 | #·Remediation·is·applicable·only·in·certain·platforms |
| 113 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 117 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 137, 38 lines modified | Offset 142, 33 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 144 | ··-·low_complexity |
| 140 | ··-·low_disruption | 145 | ··-·low_disruption |
| 141 | ··-·medium_severity | 146 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·--add=aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_aide | 154 | include·install_aide |
| 160 | class·install_aide·{ | 155 | class·install_aide·{ |
| 161 | ··package·{·'aide': | 156 | ··package·{·'aide': |
| 162 | ····ensure·=>·'installed', | 157 | ····ensure·=>·'installed', |
| 163 | ··} | 158 | ··} |
| 164 | } | 159 | } |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·--add=aide | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 167 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·/usr/sbin/aide·--init | 168 | $·sudo·/usr/sbin/aide·--init |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 169 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 170 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 170 | To·initiate·a·manual·check,·run·the·following·command: | 171 | To·initiate·a·manual·check,·run·the·following·command: |
| 171 | $·sudo·/usr/sbin/aide·--check | 172 | $·sudo·/usr/sbin/aide·--check |
| Offset 1683, 14 lines modified | Offset 1683, 18 lines modified | ||
| 1683 | ············_\x8i_\x8s_\x8m······1446 | 1683 | ············_\x8i_\x8s_\x8m······1446 |
| 1684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1688 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 1688 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 1689 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 1689 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 1690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1691 | [customizations] | ||
| 1692 | fips·=·true | ||
| 1690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1691 | #·Remediation·is·applicable·only·in·certain·platforms | 1694 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1692 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1695 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1693 | var_system_crypto_policy='FIPS' | 1696 | var_system_crypto_policy='FIPS' |
| Offset 1817, 18 lines modified | Offset 1821, 14 lines modified | ||
| 1817 | ··-·NIST-800-53-SC-13 | 1821 | ··-·NIST-800-53-SC-13 |
| 1818 | ··-·enable_fips_mode | 1822 | ··-·enable_fips_mode |
| 1819 | ··-·high_severity | 1823 | ··-·high_severity |
| 1820 | ··-·medium_complexity | 1824 | ··-·medium_complexity |
| 1821 | ··-·medium_disruption | 1825 | ··-·medium_disruption |
| 1822 | ··-·reboot_required | 1826 | ··-·reboot_required |
| 1823 | ··-·restrict_strategy | 1827 | ··-·restrict_strategy |
| 1824 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1825 | [customizations] | ||
| 1826 | fips·=·true | ||
| 1827 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1828 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1828 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1829 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1829 | fips-mode-setup·--enable | 1830 | fips-mode-setup·--enable |
| 1830 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. | 1831 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. |
| 1831 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 1832 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 1832 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 1833 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 1833 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. | 1834 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. |
| Offset 5388, 14 lines modified | Offset 5388, 19 lines modified | ||
| 5388 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. | 5388 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. |
| 5389 | Severity: ··low | 5389 | Severity: ··low |
| 5390 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed | 5390 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed |
| 5391 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 5391 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 5392 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 5392 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 5393 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-010472 | 5393 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-010472 |
| 5394 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248600r991589_rule | 5394 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248600r991589_rule |
| Max diff block lines reached; 146359/154805 bytes (94.54%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e40:·3032·3 | 00037e40:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15095, 202 lines modified | Offset 15095, 202 lines modified | ||
| 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | ||
| 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003afd0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003afd0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003afe0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aff0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b000:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b010:·2269·646d·3536·3834·223e·3c74·6162·6c65··"idm5684"><table | |||
| 0003b020:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b030:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b040:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b050:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b060:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b070:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b080:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b090:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b0b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b0c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b0e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b0f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b100:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b110:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b120:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b130:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b140:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b150:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b160:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b170:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b180:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b190:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b1a0:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003b1b0:·2020·2020·7975·6d20·696e·7374·616c·6c20······yum·install· | |||
| 0003b1c0:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003b1d0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b1e0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b1f0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b200:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b210:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b220:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b230:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b240:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b250:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b260:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b270:·646d·3536·3835·2220·7461·6269·6e64·6578··dm5685"·tabindex | |||
| 0003b280:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b290:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b2a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b2c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b2d0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003 | 0003afe0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003 | 0003aff0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b000:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b010:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b020:·6d35·3638·3422·3e3c·7072·653e·3c63·6f64··m5684"><pre><cod | |||
| 0003b030:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b040:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b050:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b320:·6d35·3638·3522·3e3c·7461·626c·6520·636c··m5685"><table·cl | |||
| 0003b330:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b340:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b350:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b360:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b370:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b380:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b390:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b3a0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b3b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b3c0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b3d0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b3e0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b3f0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b400:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b410:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b420:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b430:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b440:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b450:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b460:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b470:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b480:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b490:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b4a0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b4b0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b4c0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b4d0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b4e0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b4f0:·4947·2d4f·4c30·382d·3030·2d30·3130·3335··IG-OL08-00-01035 | |||
| 0003b500:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b510:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b520:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b530:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b540:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b550:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b560:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b570:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b580:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b590:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b5a0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b5b0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b5c0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b5d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b5e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b5f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 1208619/1236273 bytes (97.76%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·8 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:8 | 46 | ····*·cpe:/o:oracle:linux:8 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 104, 14 lines modified | Offset 104, 19 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 108 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"aide" | ||
| 114 | version·=·"*" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | 120 | #·Remediation·is·applicable·only·in·certain·platforms |
| 117 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 121 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 141, 38 lines modified | Offset 146, 33 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 148 | ··-·low_complexity |
| 144 | ··-·low_disruption | 149 | ··-·low_disruption |
| 145 | ··-·medium_severity | 150 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | include·install_aide | 158 | include·install_aide |
| 164 | class·install_aide·{ | 159 | class·install_aide·{ |
| 165 | ··package·{·'aide': | 160 | ··package·{·'aide': |
| 166 | ····ensure·=>·'installed', | 161 | ····ensure·=>·'installed', |
| 167 | ··} | 162 | ··} |
| 168 | } | 163 | } |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·--add=aide | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | Run·the·following·command·to·generate·a·new·database: | 171 | Run·the·following·command·to·generate·a·new·database: |
| 171 | $·sudo·/usr/sbin/aide·--init | 172 | $·sudo·/usr/sbin/aide·--init |
| 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 173 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 174 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 174 | To·initiate·a·manual·check,·run·the·following·command: | 175 | To·initiate·a·manual·check,·run·the·following·command: |
| 175 | $·sudo·/usr/sbin/aide·--check | 176 | $·sudo·/usr/sbin/aide·--check |
| Offset 1687, 14 lines modified | Offset 1687, 18 lines modified | ||
| 1687 | ············_\x8i_\x8s_\x8m······1446 | 1687 | ············_\x8i_\x8s_\x8m······1446 |
| 1688 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1688 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1689 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1689 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1690 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1690 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1691 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1691 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1692 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 1692 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 1693 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 1693 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 1694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1695 | [customizations] | ||
| 1696 | fips·=·true | ||
| 1694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1695 | #·Remediation·is·applicable·only·in·certain·platforms | 1698 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1696 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1699 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1697 | var_system_crypto_policy='FIPS' | 1700 | var_system_crypto_policy='FIPS' |
| Offset 1821, 18 lines modified | Offset 1825, 14 lines modified | ||
| 1821 | ··-·NIST-800-53-SC-13 | 1825 | ··-·NIST-800-53-SC-13 |
| 1822 | ··-·enable_fips_mode | 1826 | ··-·enable_fips_mode |
| 1823 | ··-·high_severity | 1827 | ··-·high_severity |
| 1824 | ··-·medium_complexity | 1828 | ··-·medium_complexity |
| 1825 | ··-·medium_disruption | 1829 | ··-·medium_disruption |
| 1826 | ··-·reboot_required | 1830 | ··-·reboot_required |
| 1827 | ··-·restrict_strategy | 1831 | ··-·restrict_strategy |
| 1828 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1829 | [customizations] | ||
| 1830 | fips·=·true | ||
| 1831 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1832 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1832 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1833 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1833 | fips-mode-setup·--enable | 1834 | fips-mode-setup·--enable |
| 1834 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. | 1835 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. |
| 1835 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 1836 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 1836 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 1837 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 1837 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. | 1838 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. |
| Offset 5392, 14 lines modified | Offset 5392, 19 lines modified | ||
| 5392 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. | 5392 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. |
| 5393 | Severity: ··low | 5393 | Severity: ··low |
| 5394 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed | 5394 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed |
| 5395 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 5395 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 5396 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 5396 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 5397 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-010472 | 5397 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-010472 |
| 5398 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248600r991589_rule | 5398 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248600r991589_rule |
| Max diff block lines reached; 146359/154818 bytes (94.54%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e40:·6173·206f·6620·3230·323 | 00037e40:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15037, 200 lines modified | Offset 15037, 200 lines modified | ||
| 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | ||
| 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ac30:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ac30:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ac40:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ac50:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ac60:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ac70:·6964·3d22·6964·6d35·3232·3222·3e3c·7461··id="idm5222"><ta | |||
| 0003ac80:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ac90:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aca0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003acb0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003acc0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003acd0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ace0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003acf0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ad00:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ad10:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ad20:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ad30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ad40:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ad50:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003ad60:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ad70:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003ad80:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003ad90:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003ada0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003adb0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003adc0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003add0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003ade0:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003adf0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003ae00:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003ae10:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| 0003ae20:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003ae30:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003ae40:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003ae50:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003ae60:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003ae70:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003ae80:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ae90:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003aea0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003aeb0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003aec0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003aed0:·2223·6964·6d35·3232·3322·2074·6162·696e··"#idm5223"·tabin | |||
| 0003aee0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003aef0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003af00:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003af10:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003af20:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003af30:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003a | 0003ac40:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | ||
| 0003a | 0003ac50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003a | 0003ac60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003a | 0003ac70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003a | 0003ac80:·2269·646d·3532·3232·223e·3c70·7265·3e3c··"idm5222"><pre>< | ||
| 0003af90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003afa0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003afb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003afc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003afd0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003afe0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003aff0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003 | 0003ac90:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | ||
| 0003aca0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003acb0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003acc0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003acd0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ace0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003acf0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ad00:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ad10:·2223·6964·6d35·3232·3322·2074·6162·696e··"#idm5223"·tabin | |||
| 0003ad20:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ad30:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ad40:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ad50:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ad60:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ad70:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003ad80:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003ad90:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ada0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003adb0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003adc0:·6d35·3232·3322·3e3c·7461·626c·6520·636c··m5223"><table·cl | |||
| 0003add0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ade0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003adf0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ae00:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ae10:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ae20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ae30:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ae40:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ae50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ae60:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ae70:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ae80:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ae90:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003 | 0003aea0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003aeb0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003aec0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003aed0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003aee0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003aef0:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003af00:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003af10:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003af20:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| Max diff block lines reached; 578546/605924 bytes (95.48%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 149, 38 lines modified | Offset 154, 33 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | include·install_aide | 166 | include·install_aide |
| 172 | class·install_aide·{ | 167 | class·install_aide·{ |
| 173 | ··package·{·'aide': | 168 | ··package·{·'aide': |
| 174 | ····ensure·=>·'installed', | 169 | ····ensure·=>·'installed', |
| 175 | ··} | 170 | ··} |
| 176 | } | 171 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 182 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 183 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 532, 14 lines modified | Offset 532, 19 lines modified | ||
| 532 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 532 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 533 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 537 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 538 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 538 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 539 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 540 | [[packages]] | ||
| 541 | name·=·"sudo" | ||
| 542 | version·=·"*" | ||
| 539 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 543 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 540 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 544 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 541 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 545 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 542 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 546 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 543 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 547 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 544 | #·Remediation·is·applicable·only·in·certain·platforms | 548 | #·Remediation·is·applicable·only·in·certain·platforms |
| 545 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 549 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 566, 38 lines modified | Offset 571, 33 lines modified | ||
| 566 | ··-·PCI-DSSv4-2.2.6 | 571 | ··-·PCI-DSSv4-2.2.6 |
| 567 | ··-·enable_strategy | 572 | ··-·enable_strategy |
| 568 | ··-·low_complexity | 573 | ··-·low_complexity |
| 569 | ··-·low_disruption | 574 | ··-·low_disruption |
| 570 | ··-·medium_severity | 575 | ··-·medium_severity |
| 571 | ··-·no_reboot_needed | 576 | ··-·no_reboot_needed |
| 572 | ··-·package_sudo_installed | 577 | ··-·package_sudo_installed |
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 578 | package·--add=sudo | ||
| 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 580 | [[packages]] | ||
| 581 | name·=·"sudo" | ||
| 582 | version·=·"*" | ||
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 579 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 580 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 581 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 582 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 588 | include·install_sudo | 583 | include·install_sudo |
| Max diff block lines reached; 64142/69760 bytes (91.95%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e30:·6173·206f·6620·3230·323 | 00037e30:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15042, 201 lines modified | Offset 15042, 201 lines modified | ||
| 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ac80:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003ac90:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ac80:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003ac90:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003aca0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003acb0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003acc0:·6522·2069·643d·2269·646d·3532·3232·223e··e"·id="idm5222"> | |||
| 0003acd0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ace0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003acf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ad00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ad10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ad20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ad30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ad40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ad50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ad60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ad70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ad80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ad90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ada0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003adb0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003adc0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003add0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003ade0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003adf0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003ae00:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003ae10:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003ae20:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003ae30:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003ae40:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003ae50:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003ae60:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003ae70:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003ae80:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003ae90:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003aea0:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003aeb0:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003aec0:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003aed0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003aee0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003aef0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003af00:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003af10:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003af20:·6574·3d22·2369·646d·3532·3233·2220·7461··et="#idm5223"·ta | |||
| 0003af30:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003af40:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003af50:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003af60:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003af70:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003af80:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003af90:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003a | 0003aca0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003a | 0003acb0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003a | 0003acc0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003a | 0003acd0:·6964·3d22·6964·6d35·3232·3222·3e3c·7072··id="idm5222"><pr | ||
| 0003ace0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003acf0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ad00:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ad10:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003ad20:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ad30:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003afe0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aff0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b000:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b010:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b020:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b030:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b040:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b050:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b060:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b070:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b080:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b090:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b0c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0d0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b0e0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b0f0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b100:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b110:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b120:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b130:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b140:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b150:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b160:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b170:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b180:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b190:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b1a0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b1b0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b1c0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b1d0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b1e0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b1f0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b200:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b210:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b220:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b230:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b240:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b250:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b260:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b270:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| Max diff block lines reached; 608576/636092 bytes (95.67%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 131 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 150, 38 lines modified | Offset 155, 33 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 157 | ··-·low_complexity |
| 153 | ··-·low_disruption | 158 | ··-·low_disruption |
| 154 | ··-·medium_severity | 159 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 167 | include·install_aide |
| 173 | class·install_aide·{ | 168 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 169 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 170 | ····ensure·=>·'installed', |
| 176 | ··} | 171 | ··} |
| 177 | } | 172 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 1043, 14 lines modified | Offset 1043, 19 lines modified | ||
| 1043 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 1043 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 1044 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1044 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1045 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1045 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1046 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1046 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1047 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1047 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1048 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1048 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1049 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1049 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1051 | [[packages]] | ||
| 1052 | name·=·"sudo" | ||
| 1053 | version·=·"*" | ||
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1054 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1055 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1056 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1057 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1058 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1055 | #·Remediation·is·applicable·only·in·certain·platforms | 1059 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1056 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1060 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1077, 38 lines modified | Offset 1082, 33 lines modified | ||
| 1077 | ··-·PCI-DSSv4-2.2.6 | 1082 | ··-·PCI-DSSv4-2.2.6 |
| 1078 | ··-·enable_strategy | 1083 | ··-·enable_strategy |
| 1079 | ··-·low_complexity | 1084 | ··-·low_complexity |
| 1080 | ··-·low_disruption | 1085 | ··-·low_disruption |
| 1081 | ··-·medium_severity | 1086 | ··-·medium_severity |
| 1082 | ··-·no_reboot_needed | 1087 | ··-·no_reboot_needed |
| 1083 | ··-·package_sudo_installed | 1088 | ··-·package_sudo_installed |
| 1084 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1085 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1086 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1087 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1088 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1089 | package·--add=sudo | ||
| 1090 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1091 | [[packages]] | ||
| 1092 | name·=·"sudo" | ||
| 1093 | version·=·"*" | ||
| 1094 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1095 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1090 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1096 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1091 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1097 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1092 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1098 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1093 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1099 | include·install_sudo | 1094 | include·install_sudo |
| Max diff block lines reached; 69573/75199 bytes (92.52%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e50:·6173·206f·6620·3230·323 | 00037e50:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15028, 200 lines modified | Offset 15028, 200 lines modified | ||
| 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | ||
| 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aba0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003aba0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003abb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003abc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003abd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003abe0:·2069·643d·2269·646d·3532·3232·223e·3c74···id="idm5222"><t | |||
| 0003abf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ac00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ac10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ac20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ac30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ac40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ac50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ac60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ac70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ac80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ac90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003aca0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003acb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003acc0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003acd0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ace0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003acf0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003ad00:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003ad10:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003ad20:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003ad30:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003ad40:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003ad50:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003ad60:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003ad70:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003ad80:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003ad90:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003ada0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003adb0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003adc0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003add0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003ade0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003adf0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ae00:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ae10:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ae20:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ae30:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ae40:·3d22·2369·646d·3532·3233·2220·7461·6269··="#idm5223"·tabi | |||
| 0003ae50:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ae60:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ae70:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ae80:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ae90:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003aea0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003a | 0003abb0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 0003a | 0003abc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003a | 0003abd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003a | 0003abe0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003a | 0003abf0:·3d22·6964·6d35·3232·3222·3e3c·7072·653e··="idm5222"><pre> | ||
| 0003af00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003af10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003af20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003af30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a | 0003ac00:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | ||
| 0003ac10:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ac20:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ac30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ac40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ac50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ac60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ac80:·3d22·2369·646d·3532·3233·2220·7461·6269··="#idm5223"·tabi | |||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003acf0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad30:·646d·3532·3233·223e·3c74·6162·6c65·2063··dm5223"><table·c | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003adb0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003adc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae00:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003a | 0003ae10:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003ae20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae30:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003ae40:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003ae50:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003ae60:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003ae70:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003ae80:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003ae90:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| Max diff block lines reached; 426024/453402 bytes (93.96%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 19 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | 127 | #·Remediation·is·applicable·only·in·certain·platforms |
| 124 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 128 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 147, 38 lines modified | Offset 152, 33 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 154 | ··-·low_complexity |
| 150 | ··-·low_disruption | 155 | ··-·low_disruption |
| 151 | ··-·medium_severity | 156 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | include·install_aide | 164 | include·install_aide |
| 170 | class·install_aide·{ | 165 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 166 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 167 | ····ensure·=>·'installed', |
| 173 | ··} | 168 | ··} |
| 174 | } | 169 | } |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 179 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 180 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 181 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 497, 14 lines modified | Offset 497, 19 lines modified | ||
| 497 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 497 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 498 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 498 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 499 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 499 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 500 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 500 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 501 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 501 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 502 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 502 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 503 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 503 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 505 | [[packages]] | ||
| 506 | name·=·"sudo" | ||
| 507 | version·=·"*" | ||
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 508 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 509 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 510 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 511 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 512 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 509 | #·Remediation·is·applicable·only·in·certain·platforms | 513 | #·Remediation·is·applicable·only·in·certain·platforms |
| 510 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 514 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 531, 38 lines modified | Offset 536, 33 lines modified | ||
| 531 | ··-·PCI-DSSv4-2.2.6 | 536 | ··-·PCI-DSSv4-2.2.6 |
| 532 | ··-·enable_strategy | 537 | ··-·enable_strategy |
| 533 | ··-·low_complexity | 538 | ··-·low_complexity |
| 534 | ··-·low_disruption | 539 | ··-·low_disruption |
| 535 | ··-·medium_severity | 540 | ··-·medium_severity |
| 536 | ··-·no_reboot_needed | 541 | ··-·no_reboot_needed |
| 537 | ··-·package_sudo_installed | 542 | ··-·package_sudo_installed |
| 538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 543 | package·--add=sudo | ||
| 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 545 | [[packages]] | ||
| 546 | name·=·"sudo" | ||
| 547 | version·=·"*" | ||
| 548 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 543 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 549 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 544 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 550 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 545 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 551 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 546 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 552 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 547 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 553 | include·install_sudo | 548 | include·install_sudo |
| Max diff block lines reached; 48394/54131 bytes (89.40%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e40:·6620·3230·323 | 00037e40:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 14718, 182 lines modified | Offset 14718, 182 lines modified | ||
| 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | ||
| 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00039840:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 00039850:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 00039840:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 00039850:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00039860:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00039870:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00039880:·2269·646d·3834·3339·223e·3c74·6162·6c65··"idm8439"><table | |||
| 00039890:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000398a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000398b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000398c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 000398d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 000398e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000398f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00039900:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00039910:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039920:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00039930:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00039940:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00039950:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00039960:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00039970:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00039980:·653e·0a69·6620·2120·7270·6d20·2d71·202d··e>.if·!·rpm·-q·- | |||
| 00039990:·2d71·7569·6574·2022·646e·662d·6175·746f··-quiet·"dnf-auto | |||
| 000399a0:·6d61·7469·6322·203b·2074·6865·6e0a·2020··matic"·;·then.·· | |||
| 000399b0:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 000399c0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | |||
| 000399d0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 00039 | 00039860:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00039 | 00039870:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00039880:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039890:·6d38·3433·3922·3e3c·7072·653e·3c63·6f64··m8439"><pre><cod | |||
| 000398a0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 000398b0:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 000398c0:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 000398d0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 000398e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 000398f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00039 | 00039900:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 00039a10:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00039a20:·7267·6574·3d22·2369·646d·3834·3430·2220··rget="#idm8440"· | |||
| 00039a30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00039a40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00039a50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00039a60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00039a70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00039a80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00039 | 00039910:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 00039920:·6172·6765·743d·2223·6964·6d38·3434·3022··arget="#idm8440" | |||
| 00039930:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00039940:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00039950:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00039960:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00039970:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00039980:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00039990:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00039 | 000399a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00039 | 000399b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00039 | 000399c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00039 | 000399d0:·6964·3d22·6964·6d38·3434·3022·3e3c·7461··id="idm8440"><ta | ||
| 00039 | 000399e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 00039 | 000399f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 00039 | 00039a00:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 00039 | 00039a10:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 00039 | 00039a20:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 00039 | 00039a30:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 00039 | 00039a40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00039 | 00039a50:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 00039 | 00039a60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 00039 | 00039a70:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 00039 | 00039a80:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 00039 | 00039a90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00039 | 00039aa0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 00039 | 00039ab0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 00039 | 00039ac0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 00039ad0:·636f·6465·3e0a·6966·2021·2072·706d·202d··code>.if·!·rpm·- | |||
| 00039ae0:·7120·2d2d·7175·6965·7420·2264·6e66·2d61··q·--quiet·"dnf-a | |||
| 00039af0:·7574·6f6d·6174·6963·2220·3b20·7468·656e··utomatic"·;·then | |||
| 00039b00:·0a20·2020·2079·756d·2069·6e73·7461·6c6c··.····yum·install | |||
| 00039b10:·202d·7920·2264·6e66·2d61·7574·6f6d·6174···-y·"dnf-automat | |||
| 00039b20:·6963·220a·6669·0a3c·2f63·6f64·653e·3c2f··ic".fi.</code></ | |||
| 00039b30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00039b40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00039b50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00039b60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00039b70:·2d74·6172·6765·743d·2223·6964·6d38·3434··-target="#idm844 | |||
| 00039b80:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 00039b90:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00039ba0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00039bb0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00039bc0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00039bd0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00039be0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039bd0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 00039be0:·6e73·7572·6520·646e·662d·6175·746f·6d61··nsure·dnf-automa | |||
| 00039bf0:·7469·6320·6973·2069·6e73·7461·6c6c·6564··tic·is·installed | |||
| 00039c00:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 00039c10:·6e61·6d65·3a20·646e·662d·6175·746f·6d61··name:·dnf-automa | |||
| 00039c20:·7469·630a·2020·2020·7374·6174·653a·2070··tic.····state:·p | |||
| 00039c30:·7265·7365·6e74·0a20·2074·6167·733a·0a20··resent.··tags:.· | |||
| 00039c40:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00039c50:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00039c60:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00039c70:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| Max diff block lines reached; 95894/120788 bytes (79.39%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 14 lines modified | Offset 80, 19 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"dnf-automatic" | ||
| 90 | version·=·"*" | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 96 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 105, 38 lines modified | Offset 110, 33 lines modified | ||
| 105 | ··tags: | 110 | ··tags: |
| 106 | ··-·enable_strategy | 111 | ··-·enable_strategy |
| 107 | ··-·low_complexity | 112 | ··-·low_complexity |
| 108 | ··-·low_disruption | 113 | ··-·low_disruption |
| 109 | ··-·medium_severity | 114 | ··-·medium_severity |
| 110 | ··-·no_reboot_needed | 115 | ··-·no_reboot_needed |
| 111 | ··-·package_dnf-automatic_installed | 116 | ··-·package_dnf-automatic_installed |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=dnf-automatic | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | include·install_dnf-automatic | 122 | include·install_dnf-automatic |
| 128 | class·install_dnf-automatic·{ | 123 | class·install_dnf-automatic·{ |
| 129 | ··package·{·'dnf-automatic': | 124 | ··package·{·'dnf-automatic': |
| 130 | ····ensure·=>·'installed', | 125 | ····ensure·=>·'installed', |
| 131 | ··} | 126 | ··} |
| 132 | } | 127 | } |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=dnf-automatic | ||
| 133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 134 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 135 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 136 | automatic.conf. | 137 | automatic.conf. |
| 137 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 138 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 139 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 10677, 33 lines modified | Offset 10677, 33 lines modified | ||
| 10677 | ··-·PCI-DSSv4-2.2.4 | 10677 | ··-·PCI-DSSv4-2.2.4 |
| 10678 | ··-·disable_strategy | 10678 | ··-·disable_strategy |
| 10679 | ··-·low_complexity | 10679 | ··-·low_complexity |
| 10680 | ··-·low_disruption | 10680 | ··-·low_disruption |
| 10681 | ··-·medium_severity | 10681 | ··-·medium_severity |
| 10682 | ··-·no_reboot_needed | 10682 | ··-·no_reboot_needed |
| 10683 | ··-·package_dhcp_removed | 10683 | ··-·package_dhcp_removed |
| 10684 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10685 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10686 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10687 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10688 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10689 | package·--remove=dhcp | ||
| 10690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10684 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10691 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10685 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10692 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10686 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10693 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10687 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10694 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10688 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10695 | include·remove_dhcp | 10689 | include·remove_dhcp |
| 10696 | class·remove_dhcp·{ | 10690 | class·remove_dhcp·{ |
| 10697 | ··package·{·'dhcp': | 10691 | ··package·{·'dhcp': |
| 10698 | ····ensure·=>·'purged', | 10692 | ····ensure·=>·'purged', |
| 10699 | ··} | 10693 | ··} |
| 10700 | } | 10694 | } |
| 10695 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10696 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10697 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10698 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10699 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10700 | package·--remove=dhcp | ||
| 10701 | Group ·Mail·Server·Software· Group·contains·1·rule | 10701 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 10702 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 10702 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 10703 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 10703 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 10704 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 10704 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 10705 | possible. | 10705 | possible. |
| 10706 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. | 10706 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. |
| Offset 10785, 33 lines modified | Offset 10785, 33 lines modified | ||
| 10785 | ··-·NIST-800-53-CM-7(b) | 10785 | ··-·NIST-800-53-CM-7(b) |
| 10786 | ··-·disable_strategy | 10786 | ··-·disable_strategy |
| 10787 | ··-·low_complexity | 10787 | ··-·low_complexity |
| 10788 | ··-·low_disruption | 10788 | ··-·low_disruption |
| Max diff block lines reached; 14370/19867 bytes (72.33%) of diff not shown. | |||
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038010:·323 | 00038010:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15496, 341 lines modified | Offset 15496, 341 lines modified | ||
| 0003c870:·612d·7461·7267·6574·3d22·2369·646d·3537··a-target="#idm57 | 0003c870:·612d·7461·7267·6574·3d22·2369·646d·3537··a-target="#idm57 | ||
| 0003c880:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | 0003c880:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | ||
| 0003c890:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003c890:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c8a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003c8a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c8b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003c8b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c8c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003c8c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c8d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003c8d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c8e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c8f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c900:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c910:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c8e0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003c8f0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003c900:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c910:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c920:·6522·2069·643d·2269·646d·3537·3632·223e··e"·id="idm5762"> | |||
| 0003c930:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003c940:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003c950:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003c960:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003c970:·0a69·6620·2820·5b20·2120·2d66·202f·2e64··.if·(·[·!·-f·/.d | |||
| 0003c980:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003c990:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003c9a0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003c9b0:·5d20·2661·6d70·3b26·616d·703b·2021·2028··]·&&·!·( | |||
| 0003c9c0:·205b·2022·247b·636f·6e74·6169·6e65·723a···[·"${container: | |||
| 0003c9d0:·2d7d·2220·3d3d·2022·6277·7261·702d·6f73··-}"·==·"bwrap-os | |||
| 0003c9e0:·6275·696c·6422·205d·2029·2029·2026·616d··build"·]·)·)·&am | |||
| 0003c9f0:·703b·2661·6d70·3b20·7b20·5b20·2120·2d66··p;&·{·[·!·-f | |||
| 0003ca00:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003ca10:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003ca20:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003ca30:·656e·7620·5d3b·207d·3b20·7468·656e·0a0a··env·];·};·then.. | |||
| 0003ca40:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003ca50:·6f5f·706f·6c69·6379·3d27·3c61·6262·7220··o_policy='<abbr· | |||
| 0003ca60:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | |||
| 0003ca70:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | |||
| 0003ca80:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | |||
| 0003ca90:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | |||
| 0003caa0:·616c·7565·5f76·6172·5f73·7973·7465·6d5f··alue_var_system_ | |||
| 0003cab0:·6372·7970·746f·5f70·6f6c·6963·7922·3e46··crypto_policy">F | |||
| 0003cac0:·4950·533a·4f53·5050·3c2f·6162·6272·3e27··IPS:OSPP</abbr>' | |||
| 0003cad0:·0a0a·0a66·6970·732d·6d6f·6465·2d73·6574··...fips-mode-set | |||
| 0003cae0:·7570·202d·2d65·6e61·626c·650a·0a73·7464··up·--enable..std | |||
| 0003caf0:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003cb00:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003cb10:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003cb20:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003cb30:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003cb40:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003cb50:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003cb60:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003cb70:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003cb80:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003cb90:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003cba0:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003cbb0:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003cbc0:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003cbd0:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003cbe0:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003cbf0:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003cc00:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003cc10:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003cc20:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003cc30:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003cc40:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003cc50:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003cc60:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003cc70:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003cc80:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003cc90:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003cca0:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003ccb0:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003ccc0:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003ccd0:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003cce0:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003ccf0:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003cd00:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003cd10:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003cd20:·7220·636f·6465·0a66·690a·0a65·6c73·650a··r·code.fi..else. | |||
| 0003cd30:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003cd40:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003cd50:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003cd60:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003cd70:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003cd80:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003cd90:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003cda0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c | 0003c920:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c930:·6964·3d22·6964·6d35·3736·3222·3e3c·7072··id="idm5762"><pr | |||
| 0003c940:·653e·3c63·6f64·653e·0a5b·6375·7374·6f6d··e><code>.[custom | |||
| 0003c950:·697a·6174·696f·6e73·5d0a·6669·7073·203d··izations].fips·= | |||
| 0003cdc0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003cdd0:·3736·3422·2074·6162·696e·6465·783d·2230··764"·tabindex="0 | |||
| 0003cde0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003cdf0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ce00:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ce10:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ce20:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003ce30:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003ce40:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ce50:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ce60:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ce70:·6c61·7073·6522·2069·643d·2269·646d·3537··lapse"·id="idm57 | |||
| 0003ce80:·3634·223e·3c74·6162·6c65·2063·6c61·7373··64"><table·class | |||
| 0003ce90:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003cea0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ceb0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003cec0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ced0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003cee0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| Max diff block lines reached; 891643/938479 bytes (95.01%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:9 | 54 | ····*·cpe:/o:oracle:linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 195, 14 lines modified | Offset 195, 18 lines modified | ||
| 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 197 | ············_\x8i_\x8s_\x8m······1446 | 197 | ············_\x8i_\x8s_\x8m······1446 |
| 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | [customizations] | ||
| 204 | fips·=·true | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 203 | #·Remediation·is·applicable·only·in·certain·platforms | 206 | #·Remediation·is·applicable·only·in·certain·platforms |
| 204 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 207 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 205 | var_system_crypto_policy='FIPS:OSPP' | 208 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 325, 18 lines modified | Offset 329, 14 lines modified | ||
| 325 | ··-·NIST-800-53-SC-13 | 329 | ··-·NIST-800-53-SC-13 |
| 326 | ··-·enable_fips_mode | 330 | ··-·enable_fips_mode |
| 327 | ··-·high_severity | 331 | ··-·high_severity |
| 328 | ··-·medium_complexity | 332 | ··-·medium_complexity |
| 329 | ··-·medium_disruption | 333 | ··-·medium_disruption |
| 330 | ··-·reboot_required | 334 | ··-·reboot_required |
| 331 | ··-·restrict_strategy | 335 | ··-·restrict_strategy |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 333 | [customizations] | ||
| 334 | fips·=·true | ||
| 335 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 336 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 336 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 337 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 337 | ····*·GnuTLS·library | 338 | ····*·GnuTLS·library |
| 338 | ····*·OpenSSL·library | 339 | ····*·OpenSSL·library |
| 339 | ····*·NSS·library | 340 | ····*·NSS·library |
| 340 | ····*·OpenJDK | 341 | ····*·OpenJDK |
| 341 | ····*·Libkrb5 | 342 | ····*·Libkrb5 |
| Offset 347, 14 lines modified | Offset 347, 19 lines modified | ||
| 347 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 347 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 348 | $·sudo·yum·install·crypto-policies | 348 | $·sudo·yum·install·crypto-policies |
| 349 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 349 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 350 | Severity: ··medium | 350 | Severity: ··medium |
| 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 352 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 352 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 353 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 353 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 355 | [[packages]] | ||
| 356 | name·=·"crypto-policies" | ||
| 357 | version·=·"*" | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 359 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 363 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 372, 38 lines modified | Offset 377, 33 lines modified | ||
| 372 | ··tags: | 377 | ··tags: |
| 373 | ··-·enable_strategy | 378 | ··-·enable_strategy |
| 374 | ··-·low_complexity | 379 | ··-·low_complexity |
| 375 | ··-·low_disruption | 380 | ··-·low_disruption |
| 376 | ··-·medium_severity | 381 | ··-·medium_severity |
| 377 | ··-·no_reboot_needed | 382 | ··-·no_reboot_needed |
| 378 | ··-·package_crypto-policies_installed | 383 | ··-·package_crypto-policies_installed |
| 379 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 380 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 381 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 382 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 383 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 384 | package·--add=crypto-policies | ||
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 386 | [[packages]] | ||
| 387 | name·=·"crypto-policies" | ||
| 388 | version·=·"*" | ||
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 394 | include·install_crypto-policies | 389 | include·install_crypto-policies |
| 395 | class·install_crypto-policies·{ | 390 | class·install_crypto-policies·{ |
| 396 | ··package·{·'crypto-policies': | 391 | ··package·{·'crypto-policies': |
| 397 | ····ensure·=>·'installed', | 392 | ····ensure·=>·'installed', |
| 398 | ··} | 393 | ··} |
| 399 | } | 394 | } |
| 395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 398 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 399 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 400 | package·--add=crypto-policies | ||
| 400 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 401 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 401 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 402 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 402 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 403 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 403 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 404 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 404 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 405 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 405 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 406 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 406 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 407 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 712, 14 lines modified | Offset 712, 19 lines modified | ||
| 712 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 712 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 713 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 713 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 714 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 714 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 715 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 715 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 716 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 716 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 717 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 717 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 718 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 718 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| Max diff block lines reached; 114962/123759 bytes (92.89%) of diff not shown. | |||
| Offset 14296, 16 lines modified | Offset 14296, 16 lines modified | ||
| 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037de0:·2020·2861·7320·6f66·2032·3032·3 | 00037de0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037df0:·2d32·3 | 00037df0:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19007, 273 lines modified | Offset 19007, 273 lines modified | ||
| 0004a3e0:·612d·7461·7267·6574·3d22·2369·646d·3833··a-target="#idm83 | 0004a3e0:·612d·7461·7267·6574·3d22·2369·646d·3833··a-target="#idm83 | ||
| 0004a3f0:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | 0004a3f0:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | ||
| 0004a400:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0004a400:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004a410:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0004a410:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004a420:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0004a420:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004a430:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0004a430:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004a440:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0004a440:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004a450:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0004a460:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0004a470:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0004a480:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0004a490:·6522·2069·643d·2269·646d·3833·3132·223e··e"·id="idm8312"> | |||
| 0004a4a0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0004a4b0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0004a4c0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0004a4d0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0004a4e0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0004a4f0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0004a500:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004a510:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004a520:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004a530:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0004a540:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0004a550:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004a | 0004a450:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0004a460:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0004a470:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004a480:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004a490:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004a4a0:·6964·3d22·6964·6d38·3331·3222·3e3c·7072··id="idm8312"><pr | |||
| 0004a4b0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0004a4c0:·6765·735d·5d0a·6e61·6d65·203d·2022·7265··ges]].name·=·"re | |||
| 0004a4d0:·6172·220a·7665·7273·696f·6e20·3d20·222a··ar".version·=·"* | |||
| 0004a4e0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0004a4f0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0004a500:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0004a510:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0004a520:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0004a530:·6574·3d22·2369·646d·3833·3133·2220·7461··et="#idm8313"·ta | |||
| 0004a540:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0004a550:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0004a560:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0004a570:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0004a580:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0004a590:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0004a5a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0004a5b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004a5c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004a5d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004a5e0:·2269·646d·3833·3133·223e·3c74·6162·6c65··"idm8313"><table | |||
| 0004a5f0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0004a600:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0004a610:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0004a620:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0004a630:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0004a640:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004a650:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004a660:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004a670:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004a680:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004a | 0004a690:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0004a6a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0004a6b0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0004a6c0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0004a6d0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0004a6e0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0004a6f0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0004a700:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0004a710:·6174·666f·726d·730a·6966·2021·2028·2028··atforms.if·!·(·( | |||
| 0004a580:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004a590:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0004a5a0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0004a5b0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0004a5c0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0004a5d0:·2021·2028·2028·2028·2067·7265·7020·2d71···!·(·(·(·grep·-q | |||
| 0004a5e0:·2061·6172·6368·3634·202f·7072·6f63·2f73···aarch64·/proc/s | |||
| 0004a5f0:·7973·2f6b·6572·6e65·6c2f·6f73·7265·6c65··ys/kernel/osrele | |||
| 0004a600:·6173·6520·2661·6d70·3b26·616d·703b·2067··ase·&&·g | |||
| 0004a610:·7265·7020·2d71·5020·225e·4944·3d5b·5c22··rep·-qP·"^ID=[\" | |||
| 0004a620:·275d·3f6f·6c5b·5c22·275d·3f24·2220·222f··']?ol[\"']?$"·"/ | |||
| 0004a630:·6574·632f·6f73·2d72·656c·6561·7365·2220··etc/os-release"· | |||
| 0004a640:·2661·6d70·3b26·616d·703b·207b·2072·6561··&&·{·rea | |||
| 0004a650:·6c3d·2224·2867·7265·7020·2d50·2022·5e56··l="$(grep·-P·"^V | |||
| 0004a660:·4552·5349·4f4e·5f49·443d·5b5c·2227·5d3f··ERSION_ID=[\"']? | |||
| 0004a670:·5b5c·772e·5d2b·5b5c·2227·5d3f·2422·202f··[\w.]+[\"']?$"·/ | |||
| 0004a680:·6574·632f·6f73·2d72·656c·6561·7365·207c··etc/os-release·| | |||
| 0004a690:·2073·6564·2022·732f·5e56·4552·5349·4f4e···sed·"s/^VERSION | |||
| 0004a6a0:·5f49·443d·5b5c·2227·5d5c·3f5c·285b·5e5c··_ID=[\"']\?\([^\ | |||
| 0004a6b0:·2227·5d5c·2b5c·295b·5c22·275d·5c3f·242f··"']\+\)[\"']\?$/ | |||
| 0004a6c0:·5c31·2f22·2922·3b20·6578·7065·6374·6564··\1/")";·expected | |||
| 0004a6d0:·3d22·392e·3022·3b20·7072·696e·7466·2022··="9.0";·printf·" | |||
| 0004a6e0:·2573·5c6e·2573·2220·2224·6578·7065·6374··%s\n%s"·"$expect | |||
| 0004a6f0:·6564·2220·2224·7265·616c·2220·7c20·736f··ed"·"$real"·|·so | |||
| 0004a700:·7274·202d·5643·3b20·7d20·2920·7c7c·2028··rt·-VC;·}·)·||·( | |||
| 0004a7 | 0004a720:·2028·2067·7265·7020·2d71·2061·6172·6368···(·grep·-q·aarch | ||
| 0004a7 | 0004a730:·3634·202f·7072·6f63·2f73·7973·2f6b·6572··64·/proc/sys/ker | ||
| 0004a7 | 0004a740:·6e65·6c2f·6f73·7265·6c65·6173·6520·2661··nel/osrelease·&a | ||
| 0004a7 | 0004a750:·6d70·3b26·616d·703b·2067·7265·7020·2d71··mp;&·grep·-q | ||
| 0004a750 | 0004a760:·5020·225e·4944·3d5b·5c22·275d·3f6f·6c5b··P·"^ID=[\"']?ol[ | ||
| 0004a7 | 0004a770:·5c22·275d·3f24·2220·222f·6574·632f·6f73··\"']?$"·"/etc/os | ||
| 0004a7 | 0004a780:·2d72·656c·6561·7365·2220·2661·6d70·3b26··-release"·&& | ||
| 0004a7 | 0004a790:·616d·703b·207b·2072·6561·6c3d·2224·2867··amp;·{·real="$(g | ||
| 0004a7 | 0004a7a0:·7265·7020·2d50·2022·5e56·4552·5349·4f4e··rep·-P·"^VERSION | ||
| 0004a7 | 0004a7b0:·5f49·443d·5b5c·2227·5d3f·5b5c·772e·5d2b··_ID=[\"']?[\w.]+ | ||
| 0004a7 | 0004a7c0:·5b5c·2227·5d3f·2422·202f·6574·632f·6f73··[\"']?$"·/etc/os | ||
| 0004a7 | 0004a7d0:·2d72·656c·6561·7365·207c·2073·6564·2022··-release·|·sed·" | ||
| 0004a7 | 0004a7e0:·732f·5e56·4552·5349·4f4e·5f49·443d·5b5c··s/^VERSION_ID=[\ | ||
| 0004a7 | 0004a7f0:·2227·5d5c·3f5c·285b·5e5c·2227·5d5c·2b5c··"']\?\([^\"']\+\ | ||
| 0004a | 0004a800:·295b·5c22·275d·5c3f·242f·5c31·2f22·2922··)[\"']\?$/\1/")" | ||
| 0004a8 | 0004a810:·3b20·6578·7065·6374·6564·3d22·392e·3022··;·expected="9.0" | ||
| Max diff block lines reached; 487975/525565 bytes (92.85%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 950, 14 lines modified | Offset 950, 19 lines modified | ||
| 950 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 950 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 951 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 951 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 952 | The·rear·package·can·be·installed·with·the·following·command: | 952 | The·rear·package·can·be·installed·with·the·following·command: |
| 953 | $·sudo·yum·install·rear | 953 | $·sudo·yum·install·rear |
| 954 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 954 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 955 | Severity: ·medium | 955 | Severity: ·medium |
| 956 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 956 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 958 | [[packages]] | ||
| 959 | name·=·"rear" | ||
| 960 | version·=·"*" | ||
| 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 961 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 958 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 962 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 959 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 963 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 960 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 964 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 961 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 965 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 962 | #·Remediation·is·applicable·only·in·certain·platforms | 966 | #·Remediation·is·applicable·only·in·certain·platforms |
| 963 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 967 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 986, 38 lines modified | Offset 991, 33 lines modified | ||
| 986 | ··tags: | 991 | ··tags: |
| 987 | ··-·enable_strategy | 992 | ··-·enable_strategy |
| 988 | ··-·low_complexity | 993 | ··-·low_complexity |
| 989 | ··-·low_disruption | 994 | ··-·low_disruption |
| 990 | ··-·medium_severity | 995 | ··-·medium_severity |
| 991 | ··-·no_reboot_needed | 996 | ··-·no_reboot_needed |
| 992 | ··-·package_rear_installed | 997 | ··-·package_rear_installed |
| 993 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 994 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 995 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 996 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 997 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 998 | package·--add=rear | ||
| 999 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1000 | [[packages]] | ||
| 1001 | name·=·"rear" | ||
| 1002 | version·=·"*" | ||
| 1003 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1004 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 999 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1005 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1000 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1006 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1001 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1007 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1002 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1008 | include·install_rear | 1003 | include·install_rear |
| 1009 | class·install_rear·{ | 1004 | class·install_rear·{ |
| 1010 | ··package·{·'rear': | 1005 | ··package·{·'rear': |
| 1011 | ····ensure·=>·'installed', | 1006 | ····ensure·=>·'installed', |
| 1012 | ··} | 1007 | ··} |
| 1013 | } | 1008 | } |
| 1009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1010 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1011 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1012 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1013 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1014 | package·--add=rear | ||
| 1014 | Group ·Updating·Software· Group·contains·6·rules | 1015 | Group ·Updating·Software· Group·contains·6·rules |
| 1015 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 1016 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 1016 | Oracle·Linux·9·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 1017 | Oracle·Linux·9·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 1017 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1018 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1018 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | 1019 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. |
| Offset 1542, 38 lines modified | Offset 1542, 14 lines modified | ||
| 1542 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1542 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1543 | fi | 1543 | fi |
| 1544 | fi | 1544 | fi |
| 1545 | else | 1545 | else |
| 1546 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1546 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1547 | fi | 1547 | fi |
| 1548 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1549 | --- | ||
| 1550 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1551 | kind:·MachineConfig | ||
| 1552 | spec: | ||
| 1553 | ··config: | ||
| 1554 | ····ignition: | ||
| 1555 | ······version:·3.1.0 | ||
| 1556 | ····storage: | ||
| 1557 | ······files: | ||
| 1558 | ······-·contents: | ||
| 1559 | ··········source: | ||
| 1560 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1561 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1562 | ········mode:·0644 | ||
| 1563 | ········path:·/etc/pam.d/password-auth | ||
| 1564 | ········overwrite:·true | ||
| 1565 | ······-·contents: | ||
| 1566 | ··········source: | ||
| 1567 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1568 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1569 | ········mode:·0644 | ||
| 1570 | ········path:·/etc/pam.d/system-auth | ||
| 1571 | ········overwrite:·true | ||
| 1572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1548 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1573 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1549 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1574 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1550 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1575 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1551 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1576 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1552 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1577 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1553 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1578 | ····authselect | 1554 | ····authselect |
| Offset 1689, 14 lines modified | Offset 1665, 38 lines modified | ||
| 1689 | ··-·PCI-DSSv4-8.3.1 | 1665 | ··-·PCI-DSSv4-8.3.1 |
| 1690 | ··-·configure_strategy | 1666 | ··-·configure_strategy |
| 1691 | ··-·high_severity | 1667 | ··-·high_severity |
| 1692 | ··-·low_complexity | 1668 | ··-·low_complexity |
| 1693 | ··-·medium_disruption | 1669 | ··-·medium_disruption |
| 1694 | ··-·no_empty_passwords | 1670 | ··-·no_empty_passwords |
| Max diff block lines reached; 47008/61807 bytes (76.06%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 21145, 280 lines modified | Offset 21145, 280 lines modified | ||
| 00052980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00052980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00052990:·6d31·3135·3837·2220·7461·6269·6e64·6578··m11587"·tabindex | 00052990:·6d31·3135·3837·2220·7461·6269·6e64·6578··m11587"·tabindex | ||
| 000529a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000529a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000529b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000529b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000529c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000529c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000529d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000529d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000529e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000529e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000529f0:·6d65·6469·6174·696f·6e20· | 000529f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00052a00:· | 00052a00:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 00052a10:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00052a20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00052a30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00052a40:·7365·2220·6964·3d22·6964·6d31·3135·3837··se"·id="idm11587 | |||
| 00052a50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b63··"><pre><code>.[c | |||
| 00052a60:·7573·746f·6d69·7a61·7469·6f6e·732e·7365··ustomizations.se | |||
| 00052a70:·7276·6963·6573·5d0a·6d61·736b·6564·203d··rvices].masked·= | |||
| 00052a80:·205b·2264·6562·7567·2d73·6865·6c6c·225d···["debug-shell"] | |||
| 00052a90:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00052a | 00052aa0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 00052ab0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00052ac0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00052ad0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00052ae0:·743d·2223·6964·6d31·3135·3838·2220·7461··t="#idm11588"·ta | |||
| 00052af0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00052b00:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00052b10:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00052b20:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00052b30:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00052a20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00052a30:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 00052a40:·3538·3722·3e3c·7461·626c·6520·636c·6173··587"><table·clas | |||
| 00052a50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00052a60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00052a70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00052a80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00052a90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00052aa0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00052ab0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00052ac0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00052ad0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00052ae0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00052af0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00052b00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00052b10:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 00052b20:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00052b30:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 00052b40:·5265·6d65·6469·6174·696f·6e20· | 00052b40:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00052b50:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 00052b60:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 00052b70:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 00052b80:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 00052b90:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 00052ba0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 00052bb0:·205d·3b20·7468·656e·0a0a·5359·5354·454d···];·then..SYSTEM | |||
| 00052bc0:·4354·4c5f·4558·4543·3d27·2f75·7372·2f62··CTL_EXEC='/usr/b | |||
| 00052b | 00052b50:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 00052b60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00052b70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00052b80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00052b90:·2269·646d·3131·3538·3822·3e3c·7461·626c··"idm11588"><tabl | |||
| 00052ba0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00052bb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00052bc0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00052bd0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00052be0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00052bf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00052c00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00052c10:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00052c20:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00052c30:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00052c40:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00052c50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00052c60:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00052c70:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00052c80:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00052c90:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 00052ca0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 00052cb0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 00052cc0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 00052cd0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 00052ce0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 00052cf0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 00052d00:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 00052 | 00052d10:·5359·5354·454d·4354·4c5f·4558·4543·3d27··SYSTEMCTL_EXEC=' | ||
| 00052d20:·2f75·7372·2f62·696e·2f73·7973·7465·6d63··/usr/bin/systemc | |||
| 00052d30:·746c·270a·2224·5359·5354·454d·4354·4c5f··tl'."$SYSTEMCTL_ | |||
| 00052d40:·4558·4543·2220·7374·6f70·2027·6465·6275··EXEC"·stop·'debu | |||
| 00052d50:·672d·7368·656c·6c2e·7365·7276·6963·6527··g-shell.service' | |||
| 00052bf0:·7374·6f70·2027·6465·6275·672d·7368·656c··stop·'debug-shel | |||
| 00052c00:·6c2e·7365·7276·6963·6527·0a22·2453·5953··l.service'."$SYS | |||
| 00052c10:·5445·4d43·544c·5f45·5845·4322·2064·6973··TEMCTL_EXEC"·dis | |||
| 00052c20:·6162·6c65·2027·6465·6275·672d·7368·656c··able·'debug-shel | |||
| 00052c30:·6c2e·7365·7276·6963·6527·0a22·2453·5953··l.service'."$SYS | |||
| 00052c40:·5445·4d43·544c·5f45·5845·4322·206d·6173··TEMCTL_EXEC"·mas | |||
| 00052c50:·6b20·2764·6562·7567·2d73·6865·6c6c·2e73··k·'debug-shell.s | |||
| 00052c60:·6572·7669·6365·270a·2320·4469·7361·626c··ervice'.#·Disabl | |||
| 00052c70:·6520·736f·636b·6574·2061·6374·6976·6174··e·socket·activat | |||
| 00052c80:·696f·6e20·6966·2077·6520·6861·7665·2061··ion·if·we·have·a | |||
| 00052c90:·2075·6e69·7420·6669·6c65·2066·6f72·2069···unit·file·for·i | |||
| 00052ca0:·740a·6966·2022·2453·5953·5445·4d43·544c··t.if·"$SYSTEMCTL | |||
| 00052cb0:·5f45·5845·4322·202d·7120·6c69·7374·2d75··_EXEC"·-q·list-u | |||
| 00052cc0:·6e69·742d·6669·6c65·7320·6465·6275·672d··nit-files·debug- | |||
| 00052cd0:·7368·656c·6c2e·736f·636b·6574·3b20·7468··shell.socket;·th | |||
| 00052ce0:·656e·0a20·2020·2022·2453·5953·5445·4d43··en.····"$SYSTEMC | |||
| 00052cf0:·544c·5f45·5845·4322·2073·746f·7020·2764··TL_EXEC"·stop·'d | |||
| 00052d00:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | |||
| 00052d10:·7427·0a20·2020·2022·2453·5953·5445·4d43··t'.····"$SYSTEMC | |||
| 00052d20:·544c·5f45·5845·4322·206d·6173·6b20·2764··TL_EXEC"·mask·'d | |||
| 00052d30:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | |||
| 00052d40:·7427·0a66·690a·2320·5468·6520·7365·7276··t'.fi.#·The·serv | |||
| 00052d50:·6963·6520·6d61·7920·6e6f·7420·6265·2072··ice·may·not·be·r | |||
| Max diff block lines reached; 410287/448705 bytes (91.44%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:9 | 50 | ····*·cpe:/o:oracle:linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1315, 14 lines modified | Offset 1315, 18 lines modified | ||
| 1315 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1315 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1316 | ············_\x8c_\x8u_\x8i····3.4.5 | 1316 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1317 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1317 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1318 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1318 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1319 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1319 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1320 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1320 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1323 | [customizations.services] | ||
| 1324 | masked·=·["debug-shell"] | ||
| 1322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1323 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1324 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1325 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1326 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1327 | #·Remediation·is·applicable·only·in·certain·platforms | 1330 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1328 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1331 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1417, 18 lines modified | Offset 1421, 14 lines modified | ||
| 1417 | ··-·NIST-800-53-CM-6 | 1421 | ··-·NIST-800-53-CM-6 |
| 1418 | ··-·disable_strategy | 1422 | ··-·disable_strategy |
| 1419 | ··-·low_complexity | 1423 | ··-·low_complexity |
| 1420 | ··-·low_disruption | 1424 | ··-·low_disruption |
| 1421 | ··-·medium_severity | 1425 | ··-·medium_severity |
| 1422 | ··-·no_reboot_needed | 1426 | ··-·no_reboot_needed |
| 1423 | ··-·service_debug-shell_disabled | 1427 | ··-·service_debug-shell_disabled |
| 1424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1425 | [customizations.services] | ||
| 1426 | masked·=·["debug-shell"] | ||
| 1427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1428 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1429 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1430 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1431 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1432 | include·disable_debug-shell | 1433 | include·disable_debug-shell |
| Offset 1864, 38 lines modified | Offset 1864, 14 lines modified | ||
| 1864 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1864 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1865 | fi | 1865 | fi |
| 1866 | fi | 1866 | fi |
| 1867 | else | 1867 | else |
| 1868 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1868 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1869 | fi | 1869 | fi |
| 1870 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1871 | --- | ||
| 1872 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1873 | kind:·MachineConfig | ||
| 1874 | spec: | ||
| 1875 | ··config: | ||
| 1876 | ····ignition: | ||
| 1877 | ······version:·3.1.0 | ||
| 1878 | ····storage: | ||
| 1879 | ······files: | ||
| 1880 | ······-·contents: | ||
| 1881 | ··········source: | ||
| 1882 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1883 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1884 | ········mode:·0644 | ||
| 1885 | ········path:·/etc/pam.d/password-auth | ||
| 1886 | ········overwrite:·true | ||
| 1887 | ······-·contents: | ||
| 1888 | ··········source: | ||
| 1889 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1890 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1891 | ········mode:·0644 | ||
| 1892 | ········path:·/etc/pam.d/system-auth | ||
| 1893 | ········overwrite:·true | ||
| 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1870 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1871 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1872 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1873 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1874 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1899 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1875 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1900 | ····authselect | 1876 | ····authselect |
| Offset 2011, 14 lines modified | Offset 1987, 38 lines modified | ||
| 2011 | ··-·PCI-DSSv4-8.3.1 | 1987 | ··-·PCI-DSSv4-8.3.1 |
| 2012 | ··-·configure_strategy | 1988 | ··-·configure_strategy |
| 2013 | ··-·high_severity | 1989 | ··-·high_severity |
| 2014 | ··-·low_complexity | 1990 | ··-·low_complexity |
| 2015 | ··-·medium_disruption | 1991 | ··-·medium_disruption |
| 2016 | ··-·no_empty_passwords | 1992 | ··-·no_empty_passwords |
| 2017 | ··-·no_reboot_needed | 1993 | ··-·no_reboot_needed |
| 1994 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1995 | --- | ||
| 1996 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1997 | kind:·MachineConfig | ||
| 1998 | spec: | ||
| 1999 | ··config: | ||
| 2000 | ····ignition: | ||
| 2001 | ······version:·3.1.0 | ||
| 2002 | ····storage: | ||
| 2003 | ······files: | ||
| 2004 | ······-·contents: | ||
| 2005 | ··········source: | ||
| 2006 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2007 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2008 | ········mode:·0644 | ||
| 2009 | ········path:·/etc/pam.d/password-auth | ||
| 2010 | ········overwrite:·true | ||
| 2011 | ······-·contents: | ||
| 2012 | ··········source: | ||
| 2013 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2014 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2015 | ········mode:·0644 | ||
| 2016 | ········path:·/etc/pam.d/system-auth | ||
| 2017 | ········overwrite:·true | ||
| 2018 | Group ·Restrict·Root·Logins· Group·contains·3·rules | 2018 | Group ·Restrict·Root·Logins· Group·contains·3·rules |
| 2019 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. | 2019 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. |
| 2020 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2020 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 29764/52800 bytes (56.37%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·2861·7320·6f66·2032·3032·3 | 00037e10:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037e20:·3 | 00037e20:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15464, 341 lines modified | Offset 15464, 341 lines modified | ||
| 0003c670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c680:·743d·2223·6964·6d35·3736·3222·2074·6162··t="#idm5762"·tab | 0003c680:·743d·2223·6964·6d35·3736·3222·2074·6162··t="#idm5762"·tab | ||
| 0003c690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c6e0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003c6e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c6f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c700:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c710:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c720:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c730:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c740:·3537·3632·223e·3c70·7265·3e3c·636f·6465··5762"><pre><code | |||
| 0003c750:·3e0a·5b63·7573·746f·6d69·7a61·7469·6f6e··>.[customization | |||
| 0003c760:·735d·0a66·6970·7320·3d20·7472·7565·0a3c··s].fips·=·true.< | |||
| 0003c770:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c780:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c790:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c7a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c7b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c7c0:·2223·6964·6d35·3736·3322·2074·6162·696e··"#idm5763"·tabin | |||
| 0003c7d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c7e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c7f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c800:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c810:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c820:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003c | 0003c830:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003c | 0003c840:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003c | 0003c850:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003c | 0003c860:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003c | 0003c870:·6d35·3736·3322·3e3c·7072·653e·3c63·6f64··m5763"><pre><cod | ||
| 0003c | 0003c880:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003c | 0003c890:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003c | 0003c8a0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003c | 0003c8b0:·6174·666f·726d·730a·6966·2028·205b·2021··atforms.if·(·[·! | ||
| 0003c | 0003c8c0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 0003c | 0003c8d0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 0003c | 0003c8e0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 0003c | 0003c8f0:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | ||
| 0003c | 0003c900:·6d70·3b20·2120·2820·5b20·2224·7b63·6f6e··mp;·!·(·[·"${con | ||
| 0003c | 0003c910:·7461·696e·6572·3a2d·7d22·203d·3d20·2262··tainer:-}"·==·"b | ||
| 0003c | 0003c920:·7772·6170·2d6f·7362·7569·6c64·2220·5d20··wrap-osbuild"·]· | ||
| 0003c | 0003c930:·2920·2920·2661·6d70·3b26·616d·703b·207b··)·)·&&·{ | ||
| 0003c | 0003c940:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| 0003c | 0003c950:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | ||
| 0003c | 0003c960:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | ||
| 0003c | 0003c970:·6e74·6169·6e65·7265·6e76·205d·3b20·7d3b··ntainerenv·];·}; | ||
| 0003c | 0003c980:·2074·6865·6e0a·0a76·6172·5f73·7973·7465···then..var_syste | ||
| 0003c | 0003c990:·6d5f·6372·7970·746f·5f70·6f6c·6963·793d··m_crypto_policy= | ||
| 0003c | 0003c9a0:·273c·6162·6272·2074·6974·6c65·3d22·6672··'<abbr·title="fr | ||
| 0003c | 0003c9b0:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | ||
| 0003c | 0003c9c0:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | ||
| 0003c | 0003c9d0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 0003c | 0003c9e0:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | ||
| 0003c9f0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003ca00:·6c69·6379·223e·4649·5053·3a4f·5350·503c··licy">FIPS:OSPP< | |||
| 0003ca10:·2f61·6262·723e·270a·0a0a·6669·7073·2d6d··/abbr>'...fips-m | |||
| 0003ca20:·6f64·652d·7365·7475·7020·2d2d·656e·6162··ode-setup·--enab | |||
| 0003ca30:·6c65·0a0a·7374·6465·7272·5f6f·665f·6361··le..stderr_of_ca | |||
| 0003ca40:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003ca50:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003ca60:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003ca70:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003ca80:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003ca90:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003caa0:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003cab0:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003cac0:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003cad0:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003cae0:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003caf0:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003cb00:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003cb10:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003cb20:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003cb30:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003cb40:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003cb50:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003cb60:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003cb70:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003cb80:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003cb90:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003cba0:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003cbb0:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003cbc0:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003cbd0:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003cbe0:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003cbf0:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003cc00:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003cc10:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003cc20:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003cc30:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003cc40:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003cc50:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003cc60:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003cc70:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003cc80:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003cc90:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003cca0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003ccb0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003ccc0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ccd0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003cce0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ccf0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003cd00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003cd10:·3d22·2369·646d·3537·3635·2220·7461·6269··="#idm5765"·tabi | |||
| 0003cd20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003cd30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003cd40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| Max diff block lines reached; 891643/938617 bytes (95.00%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 187, 14 lines modified | Offset 187, 18 lines modified | ||
| 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 189 | ············_\x8i_\x8s_\x8m······1446 | 189 | ············_\x8i_\x8s_\x8m······1446 |
| 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [customizations] | ||
| 196 | fips·=·true | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | 198 | #·Remediation·is·applicable·only·in·certain·platforms |
| 196 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 199 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 197 | var_system_crypto_policy='FIPS:OSPP' | 200 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 317, 18 lines modified | Offset 321, 14 lines modified | ||
| 317 | ··-·NIST-800-53-SC-13 | 321 | ··-·NIST-800-53-SC-13 |
| 318 | ··-·enable_fips_mode | 322 | ··-·enable_fips_mode |
| 319 | ··-·high_severity | 323 | ··-·high_severity |
| 320 | ··-·medium_complexity | 324 | ··-·medium_complexity |
| 321 | ··-·medium_disruption | 325 | ··-·medium_disruption |
| 322 | ··-·reboot_required | 326 | ··-·reboot_required |
| 323 | ··-·restrict_strategy | 327 | ··-·restrict_strategy |
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 325 | [customizations] | ||
| 326 | fips·=·true | ||
| 327 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 328 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 328 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 329 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 329 | ····*·GnuTLS·library | 330 | ····*·GnuTLS·library |
| 330 | ····*·OpenSSL·library | 331 | ····*·OpenSSL·library |
| 331 | ····*·NSS·library | 332 | ····*·NSS·library |
| 332 | ····*·OpenJDK | 333 | ····*·OpenJDK |
| 333 | ····*·Libkrb5 | 334 | ····*·Libkrb5 |
| Offset 339, 14 lines modified | Offset 339, 19 lines modified | ||
| 339 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 339 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 340 | $·sudo·yum·install·crypto-policies | 340 | $·sudo·yum·install·crypto-policies |
| 341 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 341 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 342 | Severity: ··medium | 342 | Severity: ··medium |
| 343 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 343 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 344 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 344 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 347 | [[packages]] | ||
| 348 | name·=·"crypto-policies" | ||
| 349 | version·=·"*" | ||
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 351 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 355 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 364, 38 lines modified | Offset 369, 33 lines modified | ||
| 364 | ··tags: | 369 | ··tags: |
| 365 | ··-·enable_strategy | 370 | ··-·enable_strategy |
| 366 | ··-·low_complexity | 371 | ··-·low_complexity |
| 367 | ··-·low_disruption | 372 | ··-·low_disruption |
| 368 | ··-·medium_severity | 373 | ··-·medium_severity |
| 369 | ··-·no_reboot_needed | 374 | ··-·no_reboot_needed |
| 370 | ··-·package_crypto-policies_installed | 375 | ··-·package_crypto-policies_installed |
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 376 | package·--add=crypto-policies | ||
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 378 | [[packages]] | ||
| 379 | name·=·"crypto-policies" | ||
| 380 | version·=·"*" | ||
| 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 386 | include·install_crypto-policies | 381 | include·install_crypto-policies |
| 387 | class·install_crypto-policies·{ | 382 | class·install_crypto-policies·{ |
| 388 | ··package·{·'crypto-policies': | 383 | ··package·{·'crypto-policies': |
| 389 | ····ensure·=>·'installed', | 384 | ····ensure·=>·'installed', |
| 390 | ··} | 385 | ··} |
| 391 | } | 386 | } |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 392 | package·--add=crypto-policies | ||
| 392 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 393 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 393 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 394 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 394 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 395 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 395 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 396 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 396 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 397 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 397 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 398 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 398 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 399 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 704, 14 lines modified | Offset 704, 19 lines modified | ||
| 704 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 704 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 705 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 705 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 706 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 706 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 707 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 707 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 708 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 708 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 709 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 709 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 710 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 710 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| Max diff block lines reached; 114962/123798 bytes (92.86%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16376, 201 lines modified | Offset 16376, 201 lines modified | ||
| 0003ff70:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ff70:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ff80:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ff80:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ff90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ff90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ffa0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ffa0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ffb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ffb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ffc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ffc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ffd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ffd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ffe0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003fff0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ffe0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003fff0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00040000:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00040010:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00040020:·6522·2069·643d·2269·646d·3532·3232·223e··e"·id="idm5222"> | |||
| 00040030:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00040040:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00040050:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00040060:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00040070:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00040080:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040090:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000400a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000400b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000400c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 000400d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 000400e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 000400f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00040100:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00040110:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00040120:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 00040130:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 00040140:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00040150:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00040160:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 00040170:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 00040180:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 00040190:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 000401a0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 000401b0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 000401c0:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 000401d0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 000401e0:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 000401f0:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 00040200:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 00040210:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 00040220:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 00040230:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 00040240:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040250:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040260:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040270:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040280:·6574·3d22·2369·646d·3532·3233·2220·7461··et="#idm5223"·ta | |||
| 00040290:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000402a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000402b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000402c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000402d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000402e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 000402f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00040 | 00040000:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00040 | 00040010:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00040 | 00040020:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00040 | 00040030:·6964·3d22·6964·6d35·3232·3222·3e3c·7072··id="idm5222"><pr | ||
| 00040040:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00040050:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 00040060:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 00040070:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00040080:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040090:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040340:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040350:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040360:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040370:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040380:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040390:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 000403a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000403b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000403c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000403d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000403e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000403f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040400:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00040410:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00040420:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00040430:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00040440:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 00040450:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 00040460:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 00040470:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 00040480:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 00040490:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 000404a0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000404b0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000404c0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000404d0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000404e0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 000404f0:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 00040500:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 00040510:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 00040520:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 00040530:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 00040540:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 00040550:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00040560:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00040570:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00040580:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00040590:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 000405a0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 000405b0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 000405c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 000405d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| Max diff block lines reached; 607485/635001 bytes (95.67%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 408, 14 lines modified | Offset 408, 19 lines modified | ||
| 408 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 408 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 409 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 409 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 413 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 413 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 414 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 414 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 416 | [[packages]] | ||
| 417 | name·=·"aide" | ||
| 418 | version·=·"*" | ||
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 420 | #·Remediation·is·applicable·only·in·certain·platforms | 424 | #·Remediation·is·applicable·only·in·certain·platforms |
| 421 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 425 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 444, 38 lines modified | Offset 449, 33 lines modified | ||
| 444 | ··-·PCI-DSSv4-11.5.2 | 449 | ··-·PCI-DSSv4-11.5.2 |
| 445 | ··-·enable_strategy | 450 | ··-·enable_strategy |
| 446 | ··-·low_complexity | 451 | ··-·low_complexity |
| 447 | ··-·low_disruption | 452 | ··-·low_disruption |
| 448 | ··-·medium_severity | 453 | ··-·medium_severity |
| 449 | ··-·no_reboot_needed | 454 | ··-·no_reboot_needed |
| 450 | ··-·package_aide_installed | 455 | ··-·package_aide_installed |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 456 | package·--add=aide | ||
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 458 | [[packages]] | ||
| 459 | name·=·"aide" | ||
| 460 | version·=·"*" | ||
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 462 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 463 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 464 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 465 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 466 | include·install_aide | 461 | include·install_aide |
| 467 | class·install_aide·{ | 462 | class·install_aide·{ |
| 468 | ··package·{·'aide': | 463 | ··package·{·'aide': |
| 469 | ····ensure·=>·'installed', | 464 | ····ensure·=>·'installed', |
| 470 | ··} | 465 | ··} |
| 471 | } | 466 | } |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 472 | package·--add=aide | ||
| 472 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 473 | Run·the·following·command·to·generate·a·new·database: | 474 | Run·the·following·command·to·generate·a·new·database: |
| 474 | $·sudo·/usr/sbin/aide·--init | 475 | $·sudo·/usr/sbin/aide·--init |
| 475 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 476 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 476 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 477 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 477 | To·initiate·a·manual·check,·run·the·following·command: | 478 | To·initiate·a·manual·check,·run·the·following·command: |
| 478 | $·sudo·/usr/sbin/aide·--check | 479 | $·sudo·/usr/sbin/aide·--check |
| Offset 2374, 14 lines modified | Offset 2374, 19 lines modified | ||
| 2374 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 2374 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 2375 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2375 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2376 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2376 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2377 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2377 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2378 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2378 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2379 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2379 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2380 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2380 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2382 | [[packages]] | ||
| 2383 | name·=·"sudo" | ||
| 2384 | version·=·"*" | ||
| 2381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2386 | #·Remediation·is·applicable·only·in·certain·platforms | 2390 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2387 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2391 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2408, 38 lines modified | Offset 2413, 33 lines modified | ||
| 2408 | ··-·PCI-DSSv4-2.2.6 | 2413 | ··-·PCI-DSSv4-2.2.6 |
| 2409 | ··-·enable_strategy | 2414 | ··-·enable_strategy |
| 2410 | ··-·low_complexity | 2415 | ··-·low_complexity |
| 2411 | ··-·low_disruption | 2416 | ··-·low_disruption |
| 2412 | ··-·medium_severity | 2417 | ··-·medium_severity |
| 2413 | ··-·no_reboot_needed | 2418 | ··-·no_reboot_needed |
| 2414 | ··-·package_sudo_installed | 2419 | ··-·package_sudo_installed |
| 2415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2420 | package·--add=sudo | ||
| 2421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2422 | [[packages]] | ||
| 2423 | name·=·"sudo" | ||
| 2424 | version·=·"*" | ||
| 2425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2420 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2421 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2422 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2423 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2424 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2430 | include·install_sudo | 2425 | include·install_sudo |
| Max diff block lines reached; 70345/76306 bytes (92.19%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037d40:·2d3 | 00037d40:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 21179, 823 lines modified | Offset 21179, 823 lines modified | ||
| 00052ba0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 00052ba0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00052bb0:·2369·646d·3134·3030·3622·2074·6162·696e··#idm14006"·tabin | 00052bb0:·2369·646d·3134·3030·3622·2074·6162·696e··#idm14006"·tabin | ||
| 00052bc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00052bc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00052bd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00052bd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00052be0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00052be0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00052bf0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00052bf0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00052c00:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00052c00:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00052c10:·3e52·656d·6564·6961·7469·6f6e·204 | 00052c10:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 00052c20:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 00052c30:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00052c | 00052c20:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 00052c30:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00052c40:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00052c50:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00052c60:·2269·646d·3134·3030·3622·3e3c·7461·626c··"idm14006"><tabl | |||
| 00052c70:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00052c80:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00052c90:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00052ca0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00052cb0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00052cc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00052cd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00052ce0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00052cf0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 00052d00:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00052d10:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00052d20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00052d30:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00052d40:·7464·3e63·6f6e·6669·6775·7265·3c2f·7464··td>configure</td | |||
| 00052d50:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00052d60:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00052d70:·2050·7265·7665·6e74·204c·6f67·696e·2074···Prevent·Login·t | |||
| 00052d80:·6f20·4163·636f·756e·7473·2057·6974·6820··o·Accounts·With· | |||
| 00052d90:·456d·7074·7920·5061·7373·776f·7264·202d··Empty·Password·- | |||
| 00052da0:·2043·6865·636b·2069·6620·7379·7374·656d···Check·if·system | |||
| 00052db0:·2072·656c·6965·7320·6f6e·0a20·2020·2061···relies·on.····a | |||
| 00052dc0:·7574·6873·656c·6563·740a·2020·616e·7369··uthselect.··ansi | |||
| 00052dd0:·626c·652e·6275·696c·7469·6e2e·7374·6174··ble.builtin.stat | |||
| 00052de0:·3a0a·2020·2020·7061·7468·3a20·2f75·7372··:.····path:·/usr | |||
| 00052df0:·2f62·696e·2f61·7574·6873·656c·6563·740a··/bin/authselect. | |||
| 00052e00:·2020·7265·6769·7374·6572·3a20·7265·7375····register:·resu | |||
| 00052e10:·6c74·5f61·7574·6873·656c·6563·745f·7072··lt_authselect_pr | |||
| 00052e20:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 00052e30:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 00052e40:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 00052e50:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 00052e60:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 00052e70:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 00052e80:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 00052e90:·434a·4953·2d35·2e35·2e32·0a20·202d·204e··CJIS-5.5.2.··-·N | |||
| 00052ea0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | |||
| 00052eb0:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | |||
| 00052ec0:·3731·2d33·2e31·2e35·0a20·202d·204e·4953··71-3.1.5.··-·NIS | |||
| 00052ed0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 00052ee0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00052ef0:·2d49·412d·3528·3129·2861·290a·2020·2d20··-IA-5(1)(a).··-· | |||
| 00052f00:·4e49·5354·2d38·3030·2d35·332d·4941·2d35··NIST-800-53-IA-5 | |||
| 00052f10:·2863·290a·2020·2d20·5043·492d·4453·532d··(c).··-·PCI-DSS- | |||
| 00052f20:·5265·712d·382e·322e·330a·2020·2d20·5043··Req-8.2.3.··-·PC | |||
| 00052f30:·492d·4453·5376·342d·382e·332e·310a·2020··I-DSSv4-8.3.1.·· | |||
| 00052f40:·2d20·636f·6e66·6967·7572·655f·7374·7261··-·configure_stra | |||
| 00052f50:·7465·6779·0a20·202d·2068·6967·685f·7365··tegy.··-·high_se | |||
| 00052f60:·7665·7269·7479·0a20·202d·206c·6f77·5f63··verity.··-·low_c | |||
| 00052f70:·6f6d·706c·6578·6974·790a·2020·2d20·6d65··omplexity.··-·me | |||
| 00052f80:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 00052f90:·2020·2d20·6e6f·5f65·6d70·7479·5f70·6173····-·no_empty_pas | |||
| 00052fa0:·7377·6f72·6473·0a20·202d·206e·6f5f·7265··swords.··-·no_re | |||
| 00052fb0:·626f·6f74·5f6e·6565·6465·640a·0a2d·206e··boot_needed..-·n | |||
| 00052fc0:·616d·653a·2050·7265·7665·6e74·204c·6f67··ame:·Prevent·Log | |||
| 00052fd0:·696e·2074·6f20·4163·636f·756e·7473·2057··in·to·Accounts·W | |||
| 00052fe0:·6974·6820·456d·7074·7920·5061·7373·776f··ith·Empty·Passwo | |||
| 00052ff0:·7264·202d·2052·656d·6564·6961·7465·2075··rd·-·Remediate·u | |||
| 00053000:·7369·6e67·2061·7574·6873·656c·6563·740a··sing·authselect. | |||
| 00053010:·2020·626c·6f63·6b3a·0a0a·2020·2d20·6e61····block:..··-·na | |||
| 00053020:·6d65·3a20·5072·6576·656e·7420·4c6f·6769··me:·Prevent·Logi | |||
| 00053030:·6e20·746f·2041·6363·6f75·6e74·7320·5769··n·to·Accounts·Wi | |||
| 00053040:·7468·2045·6d70·7479·2050·6173·7377·6f72··th·Empty·Passwor | |||
| 00053050:·6420·2d20·4368·6563·6b20·696e·7465·6772··d·-·Check·integr | |||
| 00053060:·6974·7920·6f66·2061·7574·6873·656c·6563··ity·of·authselec | |||
| 00053070:·740a·2020·2020·2020·6375·7272·656e·7420··t.······current· | |||
| 00053080:·7072·6f66·696c·650a·2020·2020·616e·7369··profile.····ansi | |||
| 00053090:·626c·652e·6275·696c·7469·6e2e·636f·6d6d··ble.builtin.comm | |||
| 000530a0:·616e·643a·0a20·2020·2020·2063·6d64·3a20··and:.······cmd:· | |||
| 000530b0:·6175·7468·7365·6c65·6374·2063·6865·636b··authselect·check | |||
| 000530c0:·0a20·2020·2072·6567·6973·7465·723a·2072··.····register:·r | |||
| 000530d0:·6573·756c·745f·6175·7468·7365·6c65·6374··esult_authselect | |||
| 000530e0:·5f63·6865·636b·5f63·6d64·0a20·2020·2063··_check_cmd.····c | |||
| 000530f0:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 00053100:·7365·0a20·2020·2066·6169·6c65·645f·7768··se.····failed_wh | |||
| 00053110:·656e·3a20·6661·6c73·650a·0a20·202d·206e··en:·false..··-·n | |||
| 00053120:·616d·653a·2050·7265·7665·6e74·204c·6f67··ame:·Prevent·Log | |||
| 00053130:·696e·2074·6f20·4163·636f·756e·7473·2057··in·to·Accounts·W | |||
| 00053140:·6974·6820·456d·7074·7920·5061·7373·776f··ith·Empty·Passwo | |||
| 00053150:·7264·202d·2049·6e66·6f72·6d61·7469·7665··rd·-·Informative | |||
| 00053160:·206d·6573·7361·6765·2062·6173·6564·0a20···message·based.· | |||
| 00053170:·2020·2020·206f·6e20·7468·6520·6175·7468·······on·the·auth | |||
| 00053180:·7365·6c65·6374·2069·6e74·6567·7269·7479··select·integrity | |||
| 00053190:·2063·6865·636b·2072·6573·756c·740a·2020···check·result.·· | |||
| 000531a0:·2020·616e·7369·626c·652e·6275·696c·7469····ansible.builti | |||
| 000531b0:·6e2e·6173·7365·7274·3a0a·2020·2020·2020··n.assert:.······ | |||
| 000531c0:·7468·6174·3a0a·2020·2020·2020·2d20·7265··that:.······-·re | |||
| 000531d0:·7375·6c74·5f61·7574·6873·656c·6563·745f··sult_authselect_ | |||
| 000531e0:·6368·6563·6b5f·636d·642e·7263·203d·3d20··check_cmd.rc·==· | |||
| 000531f0:·300a·2020·2020·2020·6661·696c·5f6d·7367··0.······fail_msg | |||
| 00053200:·3a0a·2020·2020·2020·2d20·6175·7468·7365··:.······-·authse | |||
| 00053210:·6c65·6374·2069·6e74·6567·7269·7479·2063··lect·integrity·c | |||
| 00053220:·6865·636b·2066·6169·6c65·642e·2052·656d··heck·failed.·Rem | |||
| 00053230:·6564·6961·7469·6f6e·2061·626f·7274·6564··ediation·aborted | |||
| 00053240:·210a·2020·2020·2020·2d20·5468·6973·2072··!.······-·This·r | |||
| 00053250:·656d·6564·6961·7469·6f6e·2063·6f75·6c64··emediation·could | |||
| Max diff block lines reached; 382305/426933 bytes (89.55%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:9 | 42 | ····*·cpe:/o:oracle:linux:9 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1137, 38 lines modified | Offset 1137, 14 lines modified | ||
| 1137 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1137 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1138 | fi | 1138 | fi |
| 1139 | fi | 1139 | fi |
| 1140 | else | 1140 | else |
| 1141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1142 | fi | 1142 | fi |
| 1143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1144 | --- | ||
| 1145 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1146 | kind:·MachineConfig | ||
| 1147 | spec: | ||
| 1148 | ··config: | ||
| 1149 | ····ignition: | ||
| 1150 | ······version:·3.1.0 | ||
| 1151 | ····storage: | ||
| 1152 | ······files: | ||
| 1153 | ······-·contents: | ||
| 1154 | ··········source: | ||
| 1155 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1156 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1157 | ········mode:·0644 | ||
| 1158 | ········path:·/etc/pam.d/password-auth | ||
| 1159 | ········overwrite:·true | ||
| 1160 | ······-·contents: | ||
| 1161 | ··········source: | ||
| 1162 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1163 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1164 | ········mode:·0644 | ||
| 1165 | ········path:·/etc/pam.d/system-auth | ||
| 1166 | ········overwrite:·true | ||
| 1167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1172 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1148 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1173 | ····authselect | 1149 | ····authselect |
| Offset 1284, 14 lines modified | Offset 1260, 38 lines modified | ||
| 1284 | ··-·PCI-DSSv4-8.3.1 | 1260 | ··-·PCI-DSSv4-8.3.1 |
| 1285 | ··-·configure_strategy | 1261 | ··-·configure_strategy |
| 1286 | ··-·high_severity | 1262 | ··-·high_severity |
| 1287 | ··-·low_complexity | 1263 | ··-·low_complexity |
| 1288 | ··-·medium_disruption | 1264 | ··-·medium_disruption |
| 1289 | ··-·no_empty_passwords | 1265 | ··-·no_empty_passwords |
| 1290 | ··-·no_reboot_needed | 1266 | ··-·no_reboot_needed |
| 1267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1268 | --- | ||
| 1269 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1270 | kind:·MachineConfig | ||
| 1271 | spec: | ||
| 1272 | ··config: | ||
| 1273 | ····ignition: | ||
| 1274 | ······version:·3.1.0 | ||
| 1275 | ····storage: | ||
| 1276 | ······files: | ||
| 1277 | ······-·contents: | ||
| 1278 | ··········source: | ||
| 1279 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1280 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1281 | ········mode:·0644 | ||
| 1282 | ········path:·/etc/pam.d/password-auth | ||
| 1283 | ········overwrite:·true | ||
| 1284 | ······-·contents: | ||
| 1285 | ··········source: | ||
| 1286 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1287 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1288 | ········mode:·0644 | ||
| 1289 | ········path:·/etc/pam.d/system-auth | ||
| 1290 | ········overwrite:·true | ||
| 1291 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 1291 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 1292 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 1292 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 1293 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 1293 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 1294 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 1294 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 1295 | #·echo·$PATH | 1295 | #·echo·$PATH |
| 1296 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 1296 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1387, 14 lines modified | Offset 1387, 19 lines modified | ||
| 1387 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 1387 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 1388 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1388 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1389 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1389 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1390 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1390 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1391 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1391 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1392 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1392 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1395 | [[packages]] | ||
| 1396 | name·=·"rsyslog" | ||
| 1397 | version·=·"*" | ||
| 1394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1399 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1400 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1401 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1402 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1399 | #·Remediation·is·applicable·only·in·certain·platforms | 1403 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1400 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1404 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1420, 38 lines modified | Offset 1425, 33 lines modified | ||
| 1420 | ··-·NIST-800-53-CM-6(a) | 1425 | ··-·NIST-800-53-CM-6(a) |
| 1421 | ··-·enable_strategy | 1426 | ··-·enable_strategy |
| 1422 | ··-·low_complexity | 1427 | ··-·low_complexity |
| 1423 | ··-·low_disruption | 1428 | ··-·low_disruption |
| 1424 | ··-·medium_severity | 1429 | ··-·medium_severity |
| 1425 | ··-·no_reboot_needed | 1430 | ··-·no_reboot_needed |
| 1426 | ··-·package_rsyslog_installed | 1431 | ··-·package_rsyslog_installed |
| 1427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1428 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1429 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1430 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1431 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 18713/40653 bytes (46.03%) of diff not shown. | |||
| Offset 14279, 16 lines modified | Offset 14279, 16 lines modified | ||
| 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037cd0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037cd0:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037ce0:·2d3 | 00037ce0:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15061, 200 lines modified | Offset 15061, 200 lines modified | ||
| 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | ||
| 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003adb0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003adc0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003adb0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003adc0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003add0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ade0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003adf0:·2220·6964·3d22·6964·6d35·3232·3222·3e3c··"·id="idm5222">< | |||
| 0003ae00:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ae10:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ae20:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003ae30:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003ae40:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ae50:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ae60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ae70:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ae80:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ae90:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003aea0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003aeb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003aec0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003aed0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003aee0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003aef0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003af00:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003af10:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003af20:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003af30:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003af40:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003af50:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003af60:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003af70:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003af80:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003af90:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 0003afa0:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003afb0:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003afc0:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003afd0:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003afe0:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003aff0:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b000:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b010:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b020:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b030:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b040:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b050:·743d·2223·6964·6d35·3232·3322·2074·6162··t="#idm5223"·tab | |||
| 0003b060:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b070:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b080:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b090:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b0a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b0b0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b0c0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003 | 0003add0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003 | 0003ade0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003 | 0003adf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003 | 0003ae00:·643d·2269·646d·3532·3232·223e·3c70·7265··d="idm5222"><pre | ||
| 0003b110:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b120:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b130:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b140:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b150:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b160:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b170:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003 | 0003ae10:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003ae20:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003ae30:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003ae40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ae50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ae60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ae70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ae80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ae90:·743d·2223·6964·6d35·3232·3322·2074·6162··t="#idm5223"·tab | |||
| 0003aea0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003aeb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003aec0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003aed0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003aee0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003aef0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003af00:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003af10:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003af20:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003af30:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003af40:·6964·6d35·3232·3322·3e3c·7461·626c·6520··idm5223"><table· | |||
| 0003af50:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003af60:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003af70:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003af80:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003af90:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003afa0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003afb0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003afc0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003afd0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003afe0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003aff0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b000:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b010:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b | 0003b020:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b030:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b040:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b050:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b060:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b070:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b080:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| Max diff block lines reached; 1424738/1452254 bytes (98.11%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Oracle·Linux·9 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Oracle·Linux·9 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:9 | 41 | ····*·cpe:/o:oracle:linux:9 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 98, 14 lines modified | Offset 98, 19 lines modified | ||
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 103 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 103 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 106 | [[packages]] | ||
| 107 | name·=·"aide" | ||
| 108 | version·=·"*" | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 110 | #·Remediation·is·applicable·only·in·certain·platforms | 114 | #·Remediation·is·applicable·only·in·certain·platforms |
| 111 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 115 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 134, 38 lines modified | Offset 139, 33 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 139 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 140 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 141 | ··-·low_complexity |
| 137 | ··-·low_disruption | 142 | ··-·low_disruption |
| 138 | ··-·medium_severity | 143 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 144 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 145 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | include·install_aide | 151 | include·install_aide |
| 157 | class·install_aide·{ | 152 | class·install_aide·{ |
| 158 | ··package·{·'aide': | 153 | ··package·{·'aide': |
| 159 | ····ensure·=>·'installed', | 154 | ····ensure·=>·'installed', |
| 160 | ··} | 155 | ··} |
| 161 | } | 156 | } |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 163 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 164 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 164 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 165 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 165 | Severity: ··medium | 166 | Severity: ··medium |
| 166 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 167 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 167 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 168 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 168 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 169 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1690, 14 lines modified | Offset 1690, 18 lines modified | ||
| 1690 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1690 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1692 | ············_\x8i_\x8s_\x8m······1446 | 1692 | ············_\x8i_\x8s_\x8m······1446 |
| 1693 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1693 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1694 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1694 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1695 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1695 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1696 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1696 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1698 | [customizations] | ||
| 1699 | fips·=·true | ||
| 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1700 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1698 | #·Remediation·is·applicable·only·in·certain·platforms | 1701 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1699 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1702 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1700 | var_system_crypto_policy='FIPS' | 1703 | var_system_crypto_policy='FIPS' |
| Offset 1820, 18 lines modified | Offset 1824, 14 lines modified | ||
| 1820 | ··-·NIST-800-53-SC-13 | 1824 | ··-·NIST-800-53-SC-13 |
| 1821 | ··-·enable_fips_mode | 1825 | ··-·enable_fips_mode |
| 1822 | ··-·high_severity | 1826 | ··-·high_severity |
| 1823 | ··-·medium_complexity | 1827 | ··-·medium_complexity |
| 1824 | ··-·medium_disruption | 1828 | ··-·medium_disruption |
| 1825 | ··-·reboot_required | 1829 | ··-·reboot_required |
| 1826 | ··-·restrict_strategy | 1830 | ··-·restrict_strategy |
| 1827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1828 | [customizations] | ||
| 1829 | fips·=·true | ||
| 1830 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1831 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1831 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1832 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1832 | fips-mode-setup·--enable | 1833 | fips-mode-setup·--enable |
| 1833 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. | 1834 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. |
| 1834 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 1835 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 1835 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 1836 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 1836 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. | 1837 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. |
| Offset 1855, 14 lines modified | Offset 1855, 19 lines modified | ||
| 1855 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 1855 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 1856 | $·sudo·yum·install·crypto-policies | 1856 | $·sudo·yum·install·crypto-policies |
| 1857 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 1857 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 1858 | Severity: ··medium | 1858 | Severity: ··medium |
| 1859 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 1859 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 1860 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 1860 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 169801/179343 bytes (94.68%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037e50:·3 | 00037e50:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15079, 200 lines modified | Offset 15079, 200 lines modified | ||
| 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | ||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aed0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003aed0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003aee0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aef0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003af00:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003af10:·3d22·6964·6d35·3232·3222·3e3c·7461·626c··="idm5222"><tabl | |||
| 0003af20:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003af30:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003af40:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003af50:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af60:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af90:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003afa0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003afb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003afc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003afd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003afe0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003aff0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b000:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b010:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b020:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b030:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b040:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b050:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b060:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b070:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b080:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b090:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b0a0:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b0b0:·0a20·2020·2079·756d·2069·6e73·7461·6c6c··.····yum·install | |||
| 0003b0c0:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003b0d0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b0e0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b0f0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b100:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b110:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003b120:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b130:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b140:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b150:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b160:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b170:·6964·6d35·3232·3322·2074·6162·696e·6465··idm5223"·tabinde | |||
| 0003b180:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b190:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b1a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b1b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b1c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b1d0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003 | 0003aee0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003 | 0003aef0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003af00:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003 | 0003af10:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b220:·646d·3532·3233·223e·3c74·6162·6c65·2063··dm5223"><table·c | |||
| 0003b230:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b240:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b250:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b260:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b270:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b280:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b290:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003 | 0003af20:·646d·3532·3232·223e·3c70·7265·3e3c·636f··dm5222"><pre><co | ||
| 0003af30:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003af40:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003af50:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003af60:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003af70:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003af80:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003af90:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003afa0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003afb0:·6964·6d35·3232·3322·2074·6162·696e·6465··idm5223"·tabinde | |||
| 0003afc0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003afd0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003afe0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aff0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b000:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b010:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b020:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b030:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b040:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b050:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b060:·3232·3322·3e3c·7461·626c·6520·636c·6173··223"><table·clas | |||
| 0003b070:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b080:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b090:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b0a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b0b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b0c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0d0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b0e0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b0f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b100:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b110:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b120:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b130:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b | 0003b140:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b150:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b160:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b170:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b180:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b190:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b1a0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| Max diff block lines reached; 1415878/1443394 bytes (98.09%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·with·GUI·for·Oracle·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·with·GUI·for·Oracle·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 102, 14 lines modified | Offset 102, 19 lines modified | ||
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | [[packages]] | ||
| 111 | name·=·"aide" | ||
| 112 | version·=·"*" | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 114 | #·Remediation·is·applicable·only·in·certain·platforms | 118 | #·Remediation·is·applicable·only·in·certain·platforms |
| 115 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 119 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 138, 38 lines modified | Offset 143, 33 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 143 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 144 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 145 | ··-·low_complexity |
| 141 | ··-·low_disruption | 146 | ··-·low_disruption |
| 142 | ··-·medium_severity | 147 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 148 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 149 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package·--add=aide | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | include·install_aide | 155 | include·install_aide |
| 161 | class·install_aide·{ | 156 | class·install_aide·{ |
| 162 | ··package·{·'aide': | 157 | ··package·{·'aide': |
| 163 | ····ensure·=>·'installed', | 158 | ····ensure·=>·'installed', |
| 164 | ··} | 159 | ··} |
| 165 | } | 160 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·--add=aide | ||
| 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 167 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 168 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 168 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 169 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 169 | Severity: ··medium | 170 | Severity: ··medium |
| 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 171 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 171 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 172 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 172 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 173 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1694, 14 lines modified | Offset 1694, 18 lines modified | ||
| 1694 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1694 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1695 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1695 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1696 | ············_\x8i_\x8s_\x8m······1446 | 1696 | ············_\x8i_\x8s_\x8m······1446 |
| 1697 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1697 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1698 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1698 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1699 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1699 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1700 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1700 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1702 | [customizations] | ||
| 1703 | fips·=·true | ||
| 1701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1704 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1702 | #·Remediation·is·applicable·only·in·certain·platforms | 1705 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1703 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1706 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1704 | var_system_crypto_policy='FIPS' | 1707 | var_system_crypto_policy='FIPS' |
| Offset 1824, 18 lines modified | Offset 1828, 14 lines modified | ||
| 1824 | ··-·NIST-800-53-SC-13 | 1828 | ··-·NIST-800-53-SC-13 |
| 1825 | ··-·enable_fips_mode | 1829 | ··-·enable_fips_mode |
| 1826 | ··-·high_severity | 1830 | ··-·high_severity |
| 1827 | ··-·medium_complexity | 1831 | ··-·medium_complexity |
| 1828 | ··-·medium_disruption | 1832 | ··-·medium_disruption |
| 1829 | ··-·reboot_required | 1833 | ··-·reboot_required |
| 1830 | ··-·restrict_strategy | 1834 | ··-·restrict_strategy |
| 1831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1832 | [customizations] | ||
| 1833 | fips·=·true | ||
| 1834 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1835 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1835 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1836 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1836 | fips-mode-setup·--enable | 1837 | fips-mode-setup·--enable |
| 1837 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. | 1838 | To·enable·strict·FIPS·compliance,·the·fips=1·kernel·option·needs·to·be·added·to·the·kernel·boot·parameters·during·system·installation·so·key·generation·is·done·with·FIPS-approved·algorithms·and·continuous·monitoring·tests·in·place. |
| 1838 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 1839 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 1839 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 1840 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 1840 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. | 1841 | Rationale:··Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data.·The·operating·system·must·implement·cryptographic·modules·adhering·to·the·higher·standards·approved·by·the·federal·government·since·this·provides·assurance·they·have·been·tested·and·validated. |
| Offset 1859, 14 lines modified | Offset 1859, 19 lines modified | ||
| 1859 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 1859 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 1860 | $·sudo·yum·install·crypto-policies | 1860 | $·sudo·yum·install·crypto-policies |
| 1861 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 1861 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 1862 | Severity: ··medium | 1862 | Severity: ··medium |
| 1863 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 1863 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 1864 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 1864 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 1865 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 1865 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 167572/177129 bytes (94.60%) of diff not shown. | |||
| Offset 14324, 15 lines modified | Offset 14324, 15 lines modified | ||
| 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037fa0:·206f·6620·3230·323 | 00037fa0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15093, 80 lines modified | Offset 15093, 80 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003afd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003afe0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af | 0003afb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003afc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3130·3635·223e·3c70·7265·3e3c·636f··dm1065"><pre><co | |||
| 0003b010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b030:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b040:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b0 | 0003b050:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b010:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b020:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b030:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b040:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b050:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b060:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b070:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0 | 0003b060:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b070:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b080:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b090:·6964·6d31·3036·3622·2074·6162·696e·6465··idm1066"·tabinde | |||
| 0003b0a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b0b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b0c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b0d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b0e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b0f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b100:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b110:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b120:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b130:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b140:·646d·3130·3636·223e·3c74·6162·6c65·2063··dm1066"><table·c | |||
| 0003b150:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b160:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b170:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b180:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b190:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b1a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b1c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b1d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b1e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b1f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b200:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b210:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b220:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b0e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b1b0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1c0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1d0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1e0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b1f0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b200:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b210:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b220:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b230:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b240:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b250:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b260:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b270:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b280:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b290:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b2a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b2b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2d0:·646d·3130·3636·2220·7461·6269·6e64·6578··dm1066"·tabindex | |||
| 0003b2e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b300:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b310:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b320:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b330:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b340:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b350:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b360:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b370:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b380:·7365·2220·6964·3d22·6964·6d31·3036·3622··se"·id="idm1066" | |||
| 0003b | 0003b230:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b3a0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b | 0003b240:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | ||
| 0003b250:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b260:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b270:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| Max diff block lines reached; 451814/462630 bytes (97.66%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:openembedded:harden: | 44 | ····*·cpe:/o:openembedded:harden: |
| 45 | ····*·cpe:/o:openembedded:nodistro: | 45 | ····*·cpe:/o:openembedded:nodistro: |
| 46 | ····*·cpe:/o:openembedded:petalinux: | 46 | ····*·cpe:/o:openembedded:petalinux: |
| 47 | ····*·cpe:/o:openembedded:poky: | 47 | ····*·cpe:/o:openembedded:poky: |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 14 lines modified | Offset 120, 19 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 137 | ··package: |
| Offset 141, 19 lines modified | Offset 146, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 148 | ··-·low_complexity |
| 144 | ··-·low_disruption | 149 | ··-·low_disruption |
| 145 | ··-·medium_severity | 150 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | [[packages]] | ||
| 150 | name·=·"aide" | ||
| 151 | version·=·"*" | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 158 | include·install_aide |
| Offset 4264, 14 lines modified | Offset 4264, 19 lines modified | ||
| 4264 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4264 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4265 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4265 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4266 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4266 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4267 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4267 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4268 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4268 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4269 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4269 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4272 | [[packages]] | ||
| 4273 | name·=·"firewalld" | ||
| 4274 | version·=·"*" | ||
| 4271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4276 | -·name:·Ensure·firewalld·is·installed | 4280 | -·name:·Ensure·firewalld·is·installed |
| 4277 | ··package: | 4281 | ··package: |
| Offset 4283, 19 lines modified | Offset 4288, 14 lines modified | ||
| 4283 | ··-·PCI-DSSv4-1.2.1 | 4288 | ··-·PCI-DSSv4-1.2.1 |
| 4284 | ··-·enable_strategy | 4289 | ··-·enable_strategy |
| 4285 | ··-·low_complexity | 4290 | ··-·low_complexity |
| 4286 | ··-·low_disruption | 4291 | ··-·low_disruption |
| 4287 | ··-·medium_severity | 4292 | ··-·medium_severity |
| 4288 | ··-·no_reboot_needed | 4293 | ··-·no_reboot_needed |
| 4289 | ··-·package_firewalld_installed | 4294 | ··-·package_firewalld_installed |
| 4290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4291 | [[packages]] | ||
| 4292 | name·=·"firewalld" | ||
| 4293 | version·=·"*" | ||
| 4294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4296 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4297 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4298 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4299 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4299 | include·install_firewalld | 4300 | include·install_firewalld |
| Offset 4322, 14 lines modified | Offset 4322, 18 lines modified | ||
| 4322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 | 4322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 |
| 4323 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 4323 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 4324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 4324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 4325 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 4325 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 4326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- | 4326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- |
| 4327 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 4327 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 4328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 4328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 4329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4330 | [customizations.services] | ||
| 4331 | enabled·=·["firewalld"] | ||
| 4329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4334 | -·name:·Gather·the·package·facts | 4337 | -·name:·Gather·the·package·facts |
| 4335 | ··package_facts: | 4338 | ··package_facts: |
| Offset 4379, 18 lines modified | Offset 4383, 14 lines modified | ||
| 4379 | ··-·PCI-DSSv4-1.2.1 | 4383 | ··-·PCI-DSSv4-1.2.1 |
| 4380 | ··-·enable_strategy | 4384 | ··-·enable_strategy |
| 4381 | ··-·low_complexity | 4385 | ··-·low_complexity |
| 4382 | ··-·low_disruption | 4386 | ··-·low_disruption |
| 4383 | ··-·medium_severity | 4387 | ··-·medium_severity |
| 4384 | ··-·no_reboot_needed | 4388 | ··-·no_reboot_needed |
| 4385 | ··-·service_firewalld_enabled | 4389 | ··-·service_firewalld_enabled |
| 4386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4387 | [customizations.services] | ||
| 4388 | enabled·=·["firewalld"] | ||
| 4389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 30046/35620 bytes (84.35%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037f50:·206f·6620·3230·323 | 00037f50:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15088, 80 lines modified | Offset 15088, 80 lines modified | ||
| 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | ||
| 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003af60:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003af70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003af80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003afa0:·6964·3d22·6964·6d31·3036·3522·3e3c·7461··id="idm1065"><ta | |||
| 0003afb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003afc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003afd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003afe0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003aff0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b000:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b020:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b030:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b040:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b050:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003 | 0003af60:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003af70:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003af80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afa0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afb0:·6d31·3036·3522·3e3c·7072·653e·3c63·6f64··m1065"><pre><cod | |||
| 0003afc0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003afd0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003afe0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003aff0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b000:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b010:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b020:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b030:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b040:·646d·3130·3636·2220·7461·6269·6e64·6578··dm1066"·tabindex | |||
| 0003b050:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b060:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b070:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b080:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b090:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b0a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b0b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b0c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0f0:·6d31·3036·3622·3e3c·7461·626c·6520·636c··m1066"><table·cl | |||
| 0003b100:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b110:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b120:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b130:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b140:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b150:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b160:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b170:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b180:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b190:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b | 0003b1a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b1d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b1e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1f0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b200:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b210:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b220:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b230:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b240:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b250:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b260:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b270:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b280:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b290:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b2a0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b2c0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b2d0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b2e0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b2f0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b300:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b310:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b320:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b330:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b340:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b350:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b360:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b090:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0a0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b0b0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b0c0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b0d0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b0e0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b0f0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b100:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b110:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b120:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b130:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b140:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b150:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b160:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b170:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b180:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b190:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b1a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b1b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b1c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b1d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b1e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| Max diff block lines reached; 451952/462768 bytes (97.66%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openembedded:harden: | 42 | ····*·cpe:/o:openembedded:harden: |
| 43 | ····*·cpe:/o:openembedded:nodistro: | 43 | ····*·cpe:/o:openembedded:nodistro: |
| 44 | ····*·cpe:/o:openembedded:petalinux: | 44 | ····*·cpe:/o:openembedded:petalinux: |
| 45 | ····*·cpe:/o:openembedded:poky: | 45 | ····*·cpe:/o:openembedded:poky: |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 19 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 135 | ··package: |
| Offset 139, 19 lines modified | Offset 144, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 146 | ··-·low_complexity |
| 142 | ··-·low_disruption | 147 | ··-·low_disruption |
| 143 | ··-·medium_severity | 148 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 156 | include·install_aide |
| Offset 3828, 14 lines modified | Offset 3828, 19 lines modified | ||
| 3828 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 3828 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 3829 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 3829 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 3830 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 3830 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 3831 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 3831 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 3832 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 3832 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 3833 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 3833 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 3834 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 3834 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 3835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3836 | [[packages]] | ||
| 3837 | name·=·"firewalld" | ||
| 3838 | version·=·"*" | ||
| 3835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3840 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3841 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3842 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3843 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3840 | -·name:·Ensure·firewalld·is·installed | 3844 | -·name:·Ensure·firewalld·is·installed |
| 3841 | ··package: | 3845 | ··package: |
| Offset 3847, 19 lines modified | Offset 3852, 14 lines modified | ||
| 3847 | ··-·PCI-DSSv4-1.2.1 | 3852 | ··-·PCI-DSSv4-1.2.1 |
| 3848 | ··-·enable_strategy | 3853 | ··-·enable_strategy |
| 3849 | ··-·low_complexity | 3854 | ··-·low_complexity |
| 3850 | ··-·low_disruption | 3855 | ··-·low_disruption |
| 3851 | ··-·medium_severity | 3856 | ··-·medium_severity |
| 3852 | ··-·no_reboot_needed | 3857 | ··-·no_reboot_needed |
| 3853 | ··-·package_firewalld_installed | 3858 | ··-·package_firewalld_installed |
| 3854 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3855 | [[packages]] | ||
| 3856 | name·=·"firewalld" | ||
| 3857 | version·=·"*" | ||
| 3858 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3859 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3860 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3861 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3862 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3863 | include·install_firewalld | 3864 | include·install_firewalld |
| Offset 3886, 14 lines modified | Offset 3886, 18 lines modified | ||
| 3886 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 | 3886 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 |
| 3887 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 3887 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 3888 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 3888 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 3889 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 3889 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 3890 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- | 3890 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- |
| 3891 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 3891 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 3892 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 3892 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 3893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3894 | [customizations.services] | ||
| 3895 | enabled·=·["firewalld"] | ||
| 3893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3898 | -·name:·Gather·the·package·facts | 3901 | -·name:·Gather·the·package·facts |
| 3899 | ··package_facts: | 3902 | ··package_facts: |
| Offset 3943, 18 lines modified | Offset 3947, 14 lines modified | ||
| 3943 | ··-·PCI-DSSv4-1.2.1 | 3947 | ··-·PCI-DSSv4-1.2.1 |
| 3944 | ··-·enable_strategy | 3948 | ··-·enable_strategy |
| 3945 | ··-·low_complexity | 3949 | ··-·low_complexity |
| 3946 | ··-·low_disruption | 3950 | ··-·low_disruption |
| 3947 | ··-·medium_severity | 3951 | ··-·medium_severity |
| 3948 | ··-·no_reboot_needed | 3952 | ··-·no_reboot_needed |
| 3949 | ··-·service_firewalld_enabled | 3953 | ··-·service_firewalld_enabled |
| 3950 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3951 | [customizations.services] | ||
| 3952 | enabled·=·["firewalld"] | ||
| 3953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3954 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 29990/35564 bytes (84.33%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2028·6173·206f·6620·3230·323 | 00037f30:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037f40:·323 | 00037f40:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15113, 80 lines modified | Offset 15113, 80 lines modified | ||
| 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | ||
| 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b0f0:·6564·6961·7469·6f6e·204 | 0003b0f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b140:·3131·3233·223e·3c74·6162·6c65·2063·6c61··1123"><table·cla | |||
| 0003b150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b100:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b110:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b120:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b130:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b140:·6522·2069·643d·2269·646d·3131·3233·223e··e"·id="idm1123"> | |||
| 0003b150:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b160:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b170:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b180:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b190:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b1a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b1c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b1d0:·6172·6765·743d·2223·6964·6d31·3132·3422··arget="#idm1124" | |||
| 0003b1e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b1f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b200:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b210:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b220:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b230:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b240:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b250:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b260:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b270:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b280:·6522·2069·643d·2269·646d·3131·3234·223e··e"·id="idm1124"> | |||
| 0003b290:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b2c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b2d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b2e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b300:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b310:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b330:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b | 0003b340:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b350:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b360:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b370:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b380:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b390:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b3a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b3b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b3c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b3d0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b3e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b3f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b400:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b410:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b420:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b430:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b440:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b450:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b460:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b470:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b480:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b490:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b4a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b4b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b4c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b4d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b4e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b4f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b500:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b240:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b250:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b260:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b270:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b280:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b290:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b2a0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b2b0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b2c0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b2d0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b2e0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b2f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b300:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b310:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b320:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b330:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b340:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b350:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b360:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 319916/330870 bytes (96.69%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server | 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server |
| 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server | 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server |
| 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server | 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 143, 19 lines modified | Offset 148, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_aide | 160 | include·install_aide |
| Offset 5672, 14 lines modified | Offset 5672, 18 lines modified | ||
| 5672 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5672 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5673 | ···················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1), | 5673 | ···················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1), |
| 5674 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310 | 5674 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310 |
| 5675 | ···················(c),·164.310(d)(1),·164.310(d)(2)(iii) | 5675 | ···················(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 5676 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 5676 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 5677 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 5677 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 5678 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 5678 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 5679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5680 | [customizations.services] | ||
| 5681 | masked·=·["debug-shell"] | ||
| 5679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5682 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5680 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5683 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5681 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5684 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5682 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5685 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5683 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 5686 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 5684 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 5687 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 5685 | ····the·System | 5688 | ····the·System |
| Offset 5749, 18 lines modified | Offset 5753, 14 lines modified | ||
| 5749 | ··-·NIST-800-53-CM-6 | 5753 | ··-·NIST-800-53-CM-6 |
| 5750 | ··-·disable_strategy | 5754 | ··-·disable_strategy |
| 5751 | ··-·low_complexity | 5755 | ··-·low_complexity |
| 5752 | ··-·low_disruption | 5756 | ··-·low_disruption |
| 5753 | ··-·medium_severity | 5757 | ··-·medium_severity |
| 5754 | ··-·no_reboot_needed | 5758 | ··-·no_reboot_needed |
| 5755 | ··-·service_debug-shell_disabled | 5759 | ··-·service_debug-shell_disabled |
| 5756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5757 | [customizations.services] | ||
| 5758 | masked·=·["debug-shell"] | ||
| 5759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5761 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5762 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5763 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5764 | include·disable_debug-shell | 5765 | include·disable_debug-shell |
| Offset 7056, 14 lines modified | Offset 7056, 18 lines modified | ||
| 7056 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR | 7056 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR |
| 7057 | ···························7.2 | 7057 | ···························7.2 |
| 7058 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 7058 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 7059 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 7059 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 7060 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 7060 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 7061 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 7061 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 7062 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 7062 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 7063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7064 | [customizations.services] | ||
| 7065 | enabled·=·["rsyslog"] | ||
| 7063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7064 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7065 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7066 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7067 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7068 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 7071 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 7069 | ··block: | 7072 | ··block: |
| Offset 7086, 18 lines modified | Offset 7090, 14 lines modified | ||
| 7086 | ··-·NIST-800-53-CM-6(a) | 7090 | ··-·NIST-800-53-CM-6(a) |
| 7087 | ··-·enable_strategy | 7091 | ··-·enable_strategy |
| 7088 | ··-·low_complexity | 7092 | ··-·low_complexity |
| 7089 | ··-·low_disruption | 7093 | ··-·low_disruption |
| 7090 | ··-·medium_severity | 7094 | ··-·medium_severity |
| 7091 | ··-·no_reboot_needed | 7095 | ··-·no_reboot_needed |
| 7092 | ··-·service_rsyslog_enabled | 7096 | ··-·service_rsyslog_enabled |
| 7093 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7094 | [customizations.services] | ||
| 7095 | enabled·=·["rsyslog"] | ||
| 7096 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7097 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7097 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7098 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7098 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7099 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 23399/29258 bytes (79.97%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2020·2861·7320·6f66·2032·3032·3 | 00037f30:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037f40:·2d32·3 | 00037f40:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:opensuse:leap:15.0 | 42 | ····*·cpe:/o:opensuse:leap:15.0 |
| 43 | ····*·cpe:/o:opensuse:leap:42.1 | 43 | ····*·cpe:/o:opensuse:leap:42.1 |
| 44 | ····*·cpe:/o:opensuse:leap:42.2 | 44 | ····*·cpe:/o:opensuse:leap:42.2 |
| 45 | ····*·cpe:/o:opensuse:leap:42.3 | 45 | ····*·cpe:/o:opensuse:leap:42.3 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups | 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups |
| 54 | and·3·rules | 54 | and·3·rules |
| 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037eb0:·206f·6620·3230·323 | 00037eb0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 14308, 15 lines modified | Offset 14308, 15 lines modified | ||
| 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ea0:·206f·6620·3230·323 | 00037ea0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 14310, 15 lines modified | Offset 14310, 15 lines modified | ||
| 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ec0:·206f·6620·3230·323 | 00037ec0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037eb0:·3230·323 | 00037eb0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00037e50:·2d32·3 | 00037e50:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037e40:·206f·6620·3230·323 | 00037e40:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037e60:·3 | 00037e60:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000381a0:·7320·6f66·2032·3032·3 | 000381a0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 19033, 66 lines modified | Offset 19033, 66 lines modified | ||
| 0004a580:·6574·3d22·2369·646d·3733·3933·2220·7461··et="#idm7393"·ta | 0004a580:·6574·3d22·2369·646d·3733·3933·2220·7461··et="#idm7393"·ta | ||
| 0004a590:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0004a590:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004a5a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0004a5a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004a5b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0004a5b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004a5c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0004a5c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004a5d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0004a5d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004a5e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0004a5e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004a5f0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0004a5f0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0004a600:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004a6 | 0004a600:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a6 | 0004a610:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a6 | 0004a620:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0004a6 | 0004a630:·3933·223e·3c74·6162·6c65·2063·6c61·7373··93"><table·class | ||
| 0004a6 | 0004a640:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a660 | 0004a650:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a6 | 0004a660:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0004a6 | 0004a670:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0004a6 | 0004a680:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0004a690:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004a6a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a6b0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a6 | 0004a6c0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0004a6b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004a6c0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0004a6d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0004a6 | 0004a6d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0004a6 | 0004a6e0:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | ||
| 0004a | 0004a6f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0004a7 | 0004a700:·793a·3c2f·7468·3e3c·7464·3e64·6973·6162··y:</th><td>disab | ||
| 0004a7 | 0004a710:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0004a7 | 0004a720:·626c·653e·3c70·7265·3e3c·636f·6465·3e61··ble><pre><code>a | ||
| 0004a7 | 0004a730:·7069·5665·7273·696f·6e3a·206d·6163·6869··piVersion:·machi | ||
| 0004a7 | 0004a740:·6e65·636f·6e66·6967·7572·6174·696f·6e2e··neconfiguration. | ||
| 0004a760 | 0004a750:·6f70·656e·7368·6966·742e·696f·2f76·310a··openshift.io/v1. | ||
| 0004a7 | 0004a760:·6b69·6e64·3a20·4d61·6368·696e·6543·6f6e··kind:·MachineCon | ||
| 0004a7 | 0004a770:·6669·670a·7370·6563·3a0a·2020·636f·6e66··fig.spec:.··conf | ||
| 0004a790 | 0004a780:·6967·3a0a·2020·2020·6967·6e69·7469·6f6e··ig:.····ignition | ||
| 0004a7a0 | 0004a790:·3a0a·2020·2020·2020·7665·7273·696f·6e3a··:.······version: | ||
| 0004a7 | 0004a7a0:·2033·2e31·2e30·0a20·2020·2073·7973·7465···3.1.0.····syste | ||
| 0004a7 | 0004a7b0:·6d64·3a0a·2020·2020·2020·756e·6974·733a··md:.······units: | ||
| 0004a7c0:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | |||
| 0004a7d0:·6562·7567·2d73·6865·6c6c·2e73·6572·7669··ebug-shell.servi | |||
| 0004a7e0:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004a7f0:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004a800:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004a | 0004a810:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | ||
| 0004a | 0004a820:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | ||
| 0004a | 0004a830:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0004a8 | 0004a840:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0004a810:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0004a820:·206e·616d·653a·2064·6562·7567·2d73·6865···name:·debug-she | |||
| 0004a830:·6c6c·2e73·6f63·6b65·740a·2020·2020·2020··ll.socket.······ | |||
| 0004a840:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a850:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a860 | 0004a850:·6b3a·2074·7275·650a·3c2f·636f·6465·3e3c··k:·true.</code>< | ||
| 0004a870 | 0004a860:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0004a8 | 0004a870:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0004a8 | 0004a880:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0004a8 | 0004a890:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0004a8 | 0004a8a0:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0004a8 | 0004a8b0:·3934·2220·7461·6269·6e64·6578·3d22·3022··94"·tabindex="0" | ||
| 0004a8 | 0004a8c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004a8 | 0004a8d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004a8 | 0004a8e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004a | 0004a8f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004a9 | 0004a900:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004a910:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0004a920:· | 0004a920:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0004a930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | 0004a930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0004a940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | 0004a940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0004a950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | 0004a950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0004a960:·3733·3934·223e·3c74·6162·6c65·2063·6c61··7394"><table·cla | 0004a960:·3733·3934·223e·3c74·6162·6c65·2063·6c61··7394"><table·cla | ||
| 0004a970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | 0004a970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0004a980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | 0004a980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0004a990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | 0004a990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6172·6765·743d·2223·6964·6d31·3831·3338··arget="#idm18138 | 00087ad0:·6172·6765·743d·2223·6964·6d31·3831·3338··arget="#idm18138 | ||
| 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00087b40:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00087b50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00087b60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00087b70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00087b80:·6c61·7073·6522·2069·643d·2269·646d·3138··lapse"·id="idm18 | |||
| 00087b90:·3133·3822·3e3c·7461·626c·6520·636c·6173··138"><table·clas | |||
| 00087ba0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00087bb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00087bc0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00087bd0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00087be0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00087bf0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00087c00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00087c10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | |||
| 00087c20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 00087c30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00087c40:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00087c50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00087c60:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 00087c70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00087c80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00087c90:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00087ca0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00087cb0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00087cc0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00087cd0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00087ce0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| Max diff block lines reached; 16750/33802 bytes (49.55%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 3585, 15 lines modified | Offset 3585, 15 lines modified | ||
| 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3587 | Severity: ···high | 3587 | Severity: ···high |
| 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3589 | Identifiers:·CCE-86189-8 | 3589 | Identifiers:·CCE-86189-8 |
| 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3597 | apiVersion:·machineconfiguration.openshift.io/v1 | 3597 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3598 | kind:·MachineConfig | 3598 | kind:·MachineConfig |
| 3599 | spec: | 3599 | spec: |
| Max diff block lines reached; 547/8543 bytes (6.40%) of diff not shown. | |||
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000381a0:·3032·3 | 000381a0:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 19032, 67 lines modified | Offset 19032, 67 lines modified | ||
| 0004a570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004a570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a580:·646d·3733·3933·2220·7461·6269·6e64·6578··dm7393"·tabindex | 0004a580:·646d·3733·3933·2220·7461·6269·6e64·6578··dm7393"·tabindex | ||
| 0004a590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0004a590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004a5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0004a5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004a5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0004a5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004a5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0004a5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004a5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0004a5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004a5e0:·6d65·6469·6174·696f·6e20· | 0004a5e0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0004a5f0:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004a | 0004a5f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004a6 | 0004a600:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004a6 | 0004a610:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004a6 | 0004a620:·2069·643d·2269·646d·3733·3933·223e·3c74···id="idm7393"><t | ||
| 0004a6 | 0004a630:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004a650 | 0004a640:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004a6 | 0004a650:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0004a6 | 0004a660:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0004a6 | 0004a670:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0004a6 | 0004a680:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0004a6a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004a6b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004a6c0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0004a6d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004a6e0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0004a6 | 0004a690:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a6a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a6b0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0004a6e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004a | 0004a6f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0004a7 | 0004a700:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | ||
| 0004a7 | 0004a710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0004a7 | 0004a720:·7265·3e3c·636f·6465·3e61·7069·5665·7273··re><code>apiVers | ||
| 0004a7 | 0004a730:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | ||
| 0004a7 | 0004a740:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | ||
| 0004a7 | 0004a750:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | ||
| 0004a7 | 0004a760:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | ||
| 0004a7 | 0004a770:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | ||
| 0004a7 | 0004a780:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | ||
| 0004a7 | 0004a790:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | ||
| 0004a7 | 0004a7a0:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | ||
| 0004a7 | 0004a7b0:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | ||
| 0004a7c0:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | |||
| 0004a7d0:·6865·6c6c·2e73·6572·7669·6365·0a20·2020··hell.service.··· | |||
| 0004a7e0:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | |||
| 0004a7f0:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | |||
| 0004a800:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004a | 0004a810:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | ||
| 0004a | 0004a820:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | ||
| 0004a7f0:·2065·6e61·626c·6564·3a20·6661·6c73·650a···enabled:·false. | |||
| 0004a800:·2020·2020·2020·2020·6d61·736b·3a20·7472··········mask:·tr | |||
| 0004a810:·7565·0a20·2020·2020·202d·206e·616d·653a··ue.······-·name: | |||
| 0004a820:·2064·6562·7567·2d73·6865·6c6c·2e73·6f63···debug-shell.soc | |||
| 0004a830:·6b65·740a·2020·2020·2020·2020·656e·6162··ket.········enab | |||
| 0004a8 | 0004a830:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | ||
| 0004a8 | 0004a840:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | ||
| 0004a860 | 0004a850:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | ||
| 0004a8 | 0004a860:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0004a8 | 0004a870:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0004a8 | 0004a880:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0004a8 | 0004a890:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0004a8 | 0004a8a0:·6574·3d22·2369·646d·3733·3934·2220·7461··et="#idm7394"·ta | ||
| 0004a8 | 0004a8b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004a8 | 0004a8c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004a8 | 0004a8d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004a8 | 0004a8e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004a | 0004a8f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004a9 | 0004a900:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004a910:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0004a920:· | 0004a920:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0004a930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0004a930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0004a940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0004a940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0004a950:·6522·2069·643d·2269·646d·3733·3934·223e··e"·id="idm7394"> | 0004a950:·6522·2069·643d·2269·646d·3733·3934·223e··e"·id="idm7394"> | ||
| 0004a960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | 0004a960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0004a970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | 0004a970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0004a980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | 0004a980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0004a990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | 0004a990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| Offset 34733, 67 lines modified | Offset 34733, 67 lines modified | ||
| 00087ac0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00087ac0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00087ad0:·2223·6964·6d31·3831·3338·2220·7461·6269··"#idm18138"·tabi | 00087ad0:·2223·6964·6d31·3831·3338·2220·7461·6269··"#idm18138"·tabi | ||
| 00087ae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00087ae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00087af0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00087af0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00087b00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00087b00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00087b10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00087b10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00087b20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00087b20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00087b30:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 00087b40:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00087b50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00087b60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00087b70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00087b80:·2069·643d·2269·646d·3138·3133·3822·3e3c···id="idm18138">< | |||
| 00087b90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00087ba0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00087bb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00087bc0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00087bd0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00087be0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00087bf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00087c00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00087c10:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 00087c20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00087c30:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | |||
| 00087c40:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | |||
| 00087c50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00087c60:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | |||
| 00087c70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00087c80:·7072·653e·3c63·6f64·653e·6170·6956·6572··pre><code>apiVer | |||
| 00087c90:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 00087ca0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 00087cb0:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| Max diff block lines reached; 16612/33940 bytes (48.95%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 3585, 15 lines modified | Offset 3585, 15 lines modified | ||
| 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3587 | Severity: ···high | 3587 | Severity: ···high |
| 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3589 | Identifiers:·CCE-86189-8 | 3589 | Identifiers:·CCE-86189-8 |
| 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3597 | apiVersion:·machineconfiguration.openshift.io/v1 | 3597 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3598 | kind:·MachineConfig | 3598 | kind:·MachineConfig |
| 3599 | spec: | 3599 | spec: |
| Max diff block lines reached; 547/8537 bytes (6.41%) of diff not shown. | |||
| Offset 14357, 16 lines modified | Offset 14357, 16 lines modified | ||
| 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000381b0:·2020·2861·7320·6f66·2032·3032·3 | 000381b0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 000381c0:·2d32·3 | 000381c0:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19034, 66 lines modified | Offset 19034, 66 lines modified | ||
| 0004a590:·7461·7267·6574·3d22·2369·646d·3733·3933··target="#idm7393 | 0004a590:·7461·7267·6574·3d22·2369·646d·3733·3933··target="#idm7393 | ||
| 0004a5a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004a5a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a5b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004a5b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a5c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004a5c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a5d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004a5d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a5e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004a5e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a5f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004a5f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a600:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0004a600:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a610:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a6 | 0004a610:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004a630 | 0004a620:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004a6 | 0004a630:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004a6 | 0004a640:·646d·3733·3933·223e·3c74·6162·6c65·2063··dm7393"><table·c | ||
| 0004a6 | 0004a650:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004a6 | 0004a660:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004a6 | 0004a670:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004a6 | 0004a680:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004a6 | 0004a690:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004a6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004a6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a6 | 0004a6d0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0004a6c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a6d0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a6e0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0004a6 | 0004a6e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0004a | 0004a6f0:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | ||
| 0004a7 | 0004a700:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0004a7 | 0004a710:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | ||
| 0004a7 | 0004a720:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | ||
| 0004a7 | 0004a730:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0004a7 | 0004a740:·6465·3e61·7069·5665·7273·696f·6e3a·206d··de>apiVersion:·m | ||
| 0004a7 | 0004a750:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | ||
| 0004a7 | 0004a760:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | ||
| 0004a7 | 0004a770:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | ||
| 0004a7 | 0004a780:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | ||
| 0004a7 | 0004a790:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | ||
| 0004a7 | 0004a7a0:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | ||
| 0004a7 | 0004a7b0:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | ||
| 0004a7 | 0004a7c0:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | ||
| 0004a7d0:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | |||
| 0004a7e0:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | |||
| 0004a7f0:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004a800:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004a810:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004a | 0004a820:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | ||
| 0004a | 0004a830:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | ||
| 0004a800:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004a810:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004a820:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004a830:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | |||
| 0004a840:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | |||
| 0004a8 | 0004a840:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | ||
| 0004a860 | 0004a850:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | ||
| 0004a8 | 0004a860:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | ||
| 0004a8 | 0004a870:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0004a8 | 0004a880:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0004a8 | 0004a890:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0004a8 | 0004a8a0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0004a8 | 0004a8b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a8 | 0004a8c0:·646d·3733·3934·2220·7461·6269·6e64·6578··dm7394"·tabindex | ||
| 0004a8 | 0004a8d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004a8 | 0004a8e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004a | 0004a8f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004a9 | 0004a900:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004a9 | 0004a910:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004a9 | 0004a920:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | ||
| 0004a930:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004a940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0004a940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004a950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0004a950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004a960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0004a960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004a970:·2269·646d·3733·3934·223e·3c74·6162·6c65··"idm7394"><table | 0004a970:·2269·646d·3733·3934·223e·3c74·6162·6c65··"idm7394"><table | ||
| 0004a980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | 0004a980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004a990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | 0004a990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004a9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | 0004a9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00087af0:·3831·3338·2220·7461·6269·6e64·6578·3d22··8138"·tabindex=" | 00087af0:·3831·3338·2220·7461·6269·6e64·6578·3d22··8138"·tabindex=" | ||
| 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00087b50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00087b60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00087b70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00087b80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00087b90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00087ba0:·646d·3138·3133·3822·3e3c·7461·626c·6520··dm18138"><table· | |||
| 00087bb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00087bc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00087bd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00087be0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00087bf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00087c00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00087c10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00087c20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00087c30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 00087c40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00087c50:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00087c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00087c70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00087c80:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00087c90:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00087ca0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | |||
| 00087cb0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00087cc0:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00087cd0:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00087ce0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| Max diff block lines reached; 8582/25772 bytes (33.30%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 14357, 15 lines modified | Offset 14357, 15 lines modified | ||
| 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000381b0:·6f66·2032·3032·3 | 000381b0:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19033, 67 lines modified | Offset 19033, 67 lines modified | ||
| 0004a580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004a580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004a590:·3d22·2369·646d·3733·3933·2220·7461·6269··="#idm7393"·tabi | 0004a590:·3d22·2369·646d·3733·3933·2220·7461·6269··="#idm7393"·tabi | ||
| 0004a5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0004a5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004a5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0004a5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004a5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0004a5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004a5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0004a5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004a5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0004a5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004a5f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0004a5f0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0004a600:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004a6 | 0004a600:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0004a6 | 0004a610:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0004a6 | 0004a620:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0004a6 | 0004a630:·7073·6522·2069·643d·2269·646d·3733·3933··pse"·id="idm7393 | ||
| 0004a6 | 0004a640:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0004a6 | 0004a650:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0004a670 | 0004a660:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004a6 | 0004a670:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0004a6 | 0004a680:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0004a6 | 0004a690:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0004a6a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004a6b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a6c0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a6 | 0004a6d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a6c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a6d0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a6e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a6 | 0004a6e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a | 0004a6f0:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | ||
| 0004a7 | 0004a700:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0004a7 | 0004a710:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | ||
| 0004a7 | 0004a720:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a7 | 0004a730:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | ||
| 0004a7 | 0004a740:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | ||
| 0004a7 | 0004a750:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | ||
| 0004a7 | 0004a760:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | ||
| 0004a7 | 0004a770:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | ||
| 0004a7 | 0004a780:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | ||
| 0004a7a0 | 0004a790:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | ||
| 0004a7 | 0004a7a0:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | ||
| 0004a7 | 0004a7b0:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | ||
| 0004a7 | 0004a7c0:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | ||
| 0004a7d0:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | |||
| 0004a7e0:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004a7f0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004a800:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004a810:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004a | 0004a820:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | ||
| 0004a | 0004a830:·6865·6c6c·2e73·6f63·6b65·740a·2020·2020··hell.socket.···· | ||
| 0004a8 | 0004a840:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | ||
| 0004a8 | 0004a850:·7365·0a20·2020·2020·2020·206d·6173·6b3a··se.········mask: | ||
| 0004a820:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004a830:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | |||
| 0004a840:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 0004a850:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 0004a860:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 0004a8 | 0004a860:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | ||
| 0004a8 | 0004a870:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0004a8 | 0004a880:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0004a8 | 0004a890:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0004a8 | 0004a8a0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0004a8 | 0004a8b0:·7461·7267·6574·3d22·2369·646d·3733·3934··target="#idm7394 | ||
| 0004a8 | 0004a8c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a8 | 0004a8d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a8 | 0004a8e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a | 0004a8f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a9 | 0004a900:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a9 | 0004a910:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a920:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a930:· | 0004a930:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0004a940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 0004a940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 0004a950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | 0004a960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0004a970:·3934·223e·3c74·6162·6c65·2063·6c61·7373··94"><table·class | 0004a970:·3934·223e·3c74·6162·6c65·2063·6c61·7373··94"><table·class | ||
| 0004a980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0004a980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0004a990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0004a9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·6765·743d·2223·6964·6d31·3831·3338·2220··get="#idm18138"· | 00087ae0:·6765·743d·2223·6964·6d31·3831·3338·2220··get="#idm18138"· | ||
| 00087af0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 00087af0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 00087b00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 00087b00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00087b10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00087b10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00087b20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00087b20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00087b30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00087b30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00087b40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00087b40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00087b50:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | |||
| 00087b60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00087b70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00087b80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00087b90:·7073·6522·2069·643d·2269·646d·3138·3133··pse"·id="idm1813 | |||
| 00087ba0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 00087bb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00087bc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00087bd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00087be0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00087bf0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00087c00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087c10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c20:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087c30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00087c40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00087c50:·643e·7472·7565·3c2f·7464·3e3c·2f74·723e··d>true</td></tr> | |||
| 00087c60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00087c70:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 00087c80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00087c90:·6c65·3e3c·7072·653e·3c63·6f64·653e·6170··le><pre><code>ap | |||
| 00087ca0:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 00087cb0:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 00087cc0:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 00087cd0:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 00087ce0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 00087cf0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| Max diff block lines reached; 8444/25634 bytes (32.94%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037f10:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037f20:·2d3 | 00037f20:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 18992, 66 lines modified | Offset 18992, 66 lines modified | ||
| 0004a2f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0004a2f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0004a300:·3339·3322·2074·6162·696e·6465·783d·2230··393"·tabindex="0 | 0004a300:·3339·3322·2074·6162·696e·6465·783d·2230··393"·tabindex="0 | ||
| 0004a310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0004a310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0004a320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0004a320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0004a330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0004a330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0004a340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0004a340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0004a350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0004a350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0004a360:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0004a360:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 0004a370:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0004a3 | 0004a370:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0004a3 | 0004a380:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0004a3 | 0004a390:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0004a3 | 0004a3a0:·3d22·6964·6d37·3339·3322·3e3c·7461·626c··="idm7393"><tabl | ||
| 0004a3 | 0004a3b0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0004a3 | 0004a3c0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0004a3 | 0004a3d0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0004a3 | 0004a3e0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0004a | 0004a3f0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0004a4 | 0004a400:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0004a420:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004a430:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0004a440:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0004a450:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004a460:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0004a4 | 0004a410:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0004a420:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004a430:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0004a440:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a450:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0004a460:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004a4 | 0004a470:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0004a4 | 0004a480:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0004a4 | 0004a490:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0004a4 | 0004a4a0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0004a4 | 0004a4b0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0004a4 | 0004a4c0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0004a4 | 0004a4d0:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0004a4 | 0004a4e0:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0004a | 0004a4f0:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0004a5 | 0004a500:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0004a5 | 0004a510:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0004a5 | 0004a520:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0004a530:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | |||
| 0004a540:·6e61·6d65·3a20·6465·6275·672d·7368·656c··name:·debug-shel | |||
| 0004a550:·6c2e·7365·7276·6963·650a·2020·2020·2020··l.service.······ | |||
| 0004a560:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a570:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a5 | 0004a580:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | ||
| 0004a5 | 0004a590:·3a20·6465·6275·672d·7368·656c·6c2e·736f··:·debug-shell.so | ||
| 0004a5 | 0004a5a0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | ||
| 0004a570:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | |||
| 0004a580:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | |||
| 0004a590:·2020·2020·2020·2d20·6e61·6d65·3a20·6465········-·name:·de | |||
| 0004a5a0:·6275·672d·7368·656c·6c2e·736f·636b·6574··bug-shell.socket | |||
| 0004a5b0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004a5 | 0004a5b0:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | ||
| 0004a5 | 0004a5c0:·2020·2020·6d61·736b·3a20·7472·7565·0a3c······mask:·true.< | ||
| 0004a5 | 0004a5d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0004a5 | 0004a5e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0004a | 0004a5f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0004a6 | 0004a600:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0004a6 | 0004a610:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0004a6 | 0004a620:·2223·6964·6d37·3339·3422·2074·6162·696e··"#idm7394"·tabin | ||
| 0004a6 | 0004a630:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a6 | 0004a640:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a6 | 0004a650:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a6 | 0004a660:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0004a6 | 0004a670:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a6 | 0004a680:·3e52·656d·6564·6961·7469·6f6e·204b·7562··>Remediation·Kub | ||
| 0004a690:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0004a6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | 0004a6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0004a6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | 0004a6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0004a6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | 0004a6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0004a6d0:·6964·3d22·6964·6d37·3339·3422·3e3c·7461··id="idm7394"><ta | 0004a6d0:·6964·3d22·6964·6d37·3339·3422·3e3c·7461··id="idm7394"><ta | ||
| 0004a6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | 0004a6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0004a6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | 0004a6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0004a700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | 0004a700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| Offset 34693, 66 lines modified | Offset 34693, 66 lines modified | ||
| 00087840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00087840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00087850:·646d·3138·3133·3822·2074·6162·696e·6465··dm18138"·tabinde | 00087850:·646d·3138·3133·3822·2074·6162·696e·6465··dm18138"·tabinde | ||
| 00087860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00087860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00087870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00087870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00087880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00087880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00087890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00087890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000878a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000878a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000878b0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | |||
| 000878c0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 000878d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000878e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000878f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00087900:·3d22·6964·6d31·3831·3338·223e·3c74·6162··="idm18138"><tab | |||
| 00087910:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00087920:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00087930:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00087940:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00087950:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00087960:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00087970:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00087980:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00087990:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 000879a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000879b0:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 000879c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000879d0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 000879e0:·7464·3e64·6973·6162·6c65·3c2f·7464·3e3c··td>disable</td>< | |||
| 000879f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00087a00:·3e3c·636f·6465·3e61·7069·5665·7273·696f··><code>apiVersio | |||
| 00087a10:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 00087a20:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| Max diff block lines reached; 8582/25772 bytes (33.30%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile |
| 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS | 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 418, 15 lines modified | Offset 418, 15 lines modified | ||
| 418 | Identifiers:·CCE-82496-1 | 418 | Identifiers:·CCE-82496-1 |
| 419 | ·············_\x8c_\x8u_\x8i····3.4.5 | 419 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 420 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 420 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 421 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 421 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 422 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 422 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 423 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 423 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 430 | apiVersion:·machineconfiguration.openshift.io/v1 | 430 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 431 | kind:·MachineConfig | 431 | kind:·MachineConfig |
| 432 | spec: | 432 | spec: |
| Offset 437, 15 lines modified | Offset 437, 15 lines modified | ||
| 437 | ······units: | 437 | ······units: |
| 438 | ······-·name:·debug-shell.service | 438 | ······-·name:·debug-shell.service |
| 439 | ········enabled:·false | 439 | ········enabled:·false |
| 440 | ········mask:·true | 440 | ········mask:·true |
| 441 | ······-·name:·debug-shell.socket | 441 | ······-·name:·debug-shell.socket |
| 442 | ········enabled:·false | 442 | ········enabled:·false |
| 443 | ········mask:·true | 443 | ········mask:·true |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 449 | apiVersion:·machineconfiguration.openshift.io/v1 | 449 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 450 | kind:·MachineConfig | 450 | kind:·MachineConfig |
| 451 | spec: | 451 | spec: |
| Offset 1868, 15 lines modified | Offset 1868, 15 lines modified | ||
| 1868 | ············_\x8c_\x8u_\x8i············3.1.16 | 1868 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1869 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1869 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1870 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1870 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1871 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1871 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1872 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1872 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1873 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1873 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1874 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1874 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1880 | apiVersion:·machineconfiguration.openshift.io/v1 | 1880 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1881 | kind:·MachineConfig | 1881 | kind:·MachineConfig |
| 1882 | spec: | 1882 | spec: |
| Offset 1887, 15 lines modified | Offset 1887, 15 lines modified | ||
| 1887 | ······units: | 1887 | ······units: |
| 1888 | ······-·name:·bluetooth.service | 1888 | ······-·name:·bluetooth.service |
| 1889 | ········enabled:·false | 1889 | ········enabled:·false |
| 1890 | ········mask:·true | 1890 | ········mask:·true |
| 1891 | ······-·name:·bluetooth.socket | 1891 | ······-·name:·bluetooth.socket |
| 1892 | ········enabled:·false | 1892 | ········enabled:·false |
| 1893 | ········mask:·true | 1893 | ········mask:·true |
| 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1899 | apiVersion:·machineconfiguration.openshift.io/v1 | 1899 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1900 | kind:·MachineConfig | 1900 | kind:·MachineConfig |
| 1901 | spec: | 1901 | spec: |
| Offset 2204, 15 lines modified | Offset 2204, 15 lines modified | ||
| 2204 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2204 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2205 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2205 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2206 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2206 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2207 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2207 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2208 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2208 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2209 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2209 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2216 | apiVersion:·machineconfiguration.openshift.io/v1 | 2216 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2217 | kind:·MachineConfig | 2217 | kind:·MachineConfig |
| 2218 | spec: | 2218 | spec: |
| Offset 2223, 15 lines modified | Offset 2223, 15 lines modified | ||
| 2223 | ······units: | 2223 | ······units: |
| 2224 | ······-·name:·autofs.service | 2224 | ······-·name:·autofs.service |
| 2225 | ········enabled:·false | 2225 | ········enabled:·false |
| 2226 | ········mask:·true | 2226 | ········mask:·true |
| 2227 | ······-·name:·autofs.socket | 2227 | ······-·name:·autofs.socket |
| 2228 | ········enabled:·false | 2228 | ········enabled:·false |
| 2229 | ········mask:·true | 2229 | ········mask:·true |
| 2230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2235 | apiVersion:·machineconfiguration.openshift.io/v1 | 2235 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2236 | kind:·MachineConfig | 2236 | kind:·MachineConfig |
| 2237 | spec: | 2237 | spec: |
| Offset 14287, 16 lines modified | Offset 14287, 16 lines modified | ||
| 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d50:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d50:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037d60:·3 | 00037d60:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 23044, 66 lines modified | Offset 23044, 66 lines modified | ||
| 0005a030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0005a030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0005a040:·3237·3032·3322·2074·6162·696e·6465·783d··27023"·tabindex= | 0005a040:·3237·3032·3322·2074·6162·696e·6465·783d··27023"·tabindex= | ||
| 0005a050:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0005a050:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0005a060:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0005a060:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0005a070:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0005a070:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0005a080:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0005a080:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0005a090:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0005a090:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0005a0a0:·6564·6961·7469·6f6e·20 | 0005a0a0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | ||
| 0005a0b0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0005a0 | 0005a0b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0005a0 | 0005a0c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0005a0 | 0005a0d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0005a0 | 0005a0e0:·6964·3d22·6964·6d32·3730·3233·223e·3c74··id="idm27023"><t | ||
| 0005a | 0005a0f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0005a1 | 0005a100:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0005a1 | 0005a110:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0005a1 | 0005a120:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0005a1 | 0005a130:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0005a1 | 0005a140:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0005a160:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0005a170:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0005a180:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0005a190:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0005a1a0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0005a1 | 0005a150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0005a160:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0005a170:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0005a180:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0005a190:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0005a1a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0005a1 | 0005a1b0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0005a1 | 0005a1c0:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | ||
| 0005a1 | 0005a1d0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0005a1 | 0005a1e0:·7265·3e3c·636f·6465·3e61·7069·5665·7273··re><code>apiVers | ||
| 0005a | 0005a1f0:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | ||
| 0005a2 | 0005a200:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | ||
| 0005a2 | 0005a210:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | ||
| 0005a2 | 0005a220:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | ||
| 0005a2 | 0005a230:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | ||
| 0005a2 | 0005a240:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | ||
| 0005a2 | 0005a250:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | ||
| 0005a2 | 0005a260:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | ||
| 0005a2 | 0005a270:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | ||
| 0005a2 | 0005a280:·202d·206e·616d·653a·2073·7368·642e·7365···-·name:·sshd.se | ||
| 0005a2a0:·650a·2020·2020·2020·2020·656e·6162·6c65··e.········enable | |||
| 0005a2b0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0005a2c0:·206d·6173·6b3a·2074·7275·650a·2020·2020···mask:·true.···· | |||
| 0005a2d0:·2020·2d20·6e61·6d65·3a20·7373·6864·2e73····-·name:·sshd.s | |||
| 0005a2 | 0005a290:·7276·6963·650a·2020·2020·2020·2020·656e··rvice.········en | ||
| 0005a2 | 0005a2a0:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | ||
| 0005a | 0005a2b0:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | ||
| 0005a2c0:·2020·2020·2020·2d20·6e61·6d65·3a20·7373········-·name:·ss | |||
| 0005a2d0:·6864·2e73·6f63·6b65·740a·2020·2020·2020··hd.socket.······ | |||
| 0005a2e0:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0005a2f0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0005a3 | 0005a300:·7275·650a·3c2f·636f·6465·3e3c·2f70·7265··rue.</code></pre | ||
| 0005a3 | 0005a310:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0005a3 | 0005a320:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0005a3 | 0005a330:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0005a3 | 0005a340:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0005a3 | 0005a350:·7267·6574·3d22·2369·646d·3237·3032·3422··rget="#idm27024" | ||
| 0005a3 | 0005a360:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0005a3 | 0005a370:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0005a3 | 0005a380:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0005a3 | 0005a390:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0005a3 | 0005a3a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0005a3 | 0005a3b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0005a3c0:·6f6e·204b·7562·6572·6e65·7465·7320·736e··on·Kubernetes·sn | |||
| 0005a3d0:·6 | 0005a3d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0005a3e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | 0005a3e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0005a3f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | 0005a3f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0005a400:·6170·7365·2220·6964·3d22·6964·6d32·3730··apse"·id="idm270 | 0005a400:·6170·7365·2220·6964·3d22·6964·6d32·3730··apse"·id="idm270 | ||
| 0005a410:·3234·223e·3c74·6162·6c65·2063·6c61·7373··24"><table·class | 0005a410:·3234·223e·3c74·6162·6c65·2063·6c61·7373··24"><table·class | ||
| 0005a420:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0005a420:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0005a430:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0005a430:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0005a440:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0005a440:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 702, 15 lines modified | Offset 702, 15 lines modified | ||
| 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 704 | Severity: ···high | 704 | Severity: ···high |
| 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 706 | Identifiers:·CCE-86189-8 | 706 | Identifiers:·CCE-86189-8 |
| 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | 714 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 715 | kind:·MachineConfig | 715 | kind:·MachineConfig |
| 716 | spec: | 716 | spec: |
| Offset 721, 15 lines modified | Offset 721, 15 lines modified | ||
| 721 | ······units: | 721 | ······units: |
| 722 | ······-·name:·sshd.service | 722 | ······-·name:·sshd.service |
| 723 | ········enabled:·false | 723 | ········enabled:·false |
| 724 | ········mask:·true | 724 | ········mask:·true |
| 725 | ······-·name:·sshd.socket | 725 | ······-·name:·sshd.socket |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 733 | apiVersion:·machineconfiguration.openshift.io/v1 | 733 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 734 | kind:·MachineConfig | 734 | kind:·MachineConfig |
| 735 | spec: | 735 | spec: |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d50:·6173·206f·6620·3230·323 | 00037d50:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 23044, 65 lines modified | Offset 23044, 65 lines modified | ||
| 0005a030:·6172·6765·743d·2223·6964·6d32·3730·3233··arget="#idm27023 | 0005a030:·6172·6765·743d·2223·6964·6d32·3730·3233··arget="#idm27023 | ||
| 0005a040:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0005a040:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0005a050:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0005a050:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0005a060:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0005a060:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0005a070:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0005a070:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0005a080:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0005a080:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0005a090:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0005a090:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0005a0a0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0005a0a0:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0005a0b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0005a0 | 0005a0b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0005a0d0 | 0005a0c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0005a0 | 0005a0d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0005a0 | 0005a0e0:·646d·3237·3032·3322·3e3c·7461·626c·6520··dm27023"><table· | ||
| 0005a | 0005a0f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0005a1 | 0005a100:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0005a1 | 0005a110:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0005a1 | 0005a120:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0005a1 | 0005a130:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0005a1 | 0005a140:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0005a1 | 0005a150:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0005a170 | 0005a160:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0005a1 | 0005a170:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0005a1 | 0005a180:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0005a1 | 0005a190:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | ||
| 0005a1 | 0005a1a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0005a1 | 0005a1b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0005a1 | 0005a1c0:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | ||
| 0005a1 | 0005a1d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0005a1 | 0005a1e0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | ||
| 0005a | 0005a1f0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | ||
| 0005a2 | 0005a200:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | ||
| 0005a2 | 0005a210:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | ||
| 0005a2 | 0005a220:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | ||
| 0005a2 | 0005a230:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | ||
| 0005a2 | 0005a240:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | ||
| 0005a2 | 0005a250:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | ||
| 0005a2 | 0005a260:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | ||
| 0005a2 | 0005a270:·6e69·7473·3a0a·2020·2020·2020·2d20·6e61··nits:.······-·na | ||
| 0005a2 | 0005a280:·6d65·3a20·7373·6864·2e73·6572·7669·6365··me:·sshd.service | ||
| 0005a2a0:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | |||
| 0005a2b0:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | |||
| 0005a2c0:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0005a2d0:·616d·653a·2073·7368·642e·736f·636b·6574··ame:·sshd.socket | |||
| 0005a2 | 0005a290:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | ||
| 0005a2 | 0005a2a0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | ||
| 0005a2b0:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0005a2c0:·202d·206e·616d·653a·2073·7368·642e·736f···-·name:·sshd.so | |||
| 0005a2d0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | |||
| 0005a2e0:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | |||
| 0005a | 0005a2f0:·2020·2020·6d61·736b·3a20·7472·7565·0a3c······mask:·true.< | ||
| 0005a3 | 0005a300:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0005a3 | 0005a310:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0005a3 | 0005a320:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0005a3 | 0005a330:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0005a3 | 0005a340:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0005a3 | 0005a350:·2223·6964·6d32·3730·3234·2220·7461·6269··"#idm27024"·tabi | ||
| 0005a3 | 0005a360:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0005a3 | 0005a370:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0005a3 | 0005a380:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0005a3 | 0005a390:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0005a3 | 0005a3a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0005a3 | 0005a3b0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 0005a3c0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0005a3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | 0005a3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0005a3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0005a3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0005a3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0005a3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0005a400:·2069·643d·2269·646d·3237·3032·3422·3e3c···id="idm27024">< | 0005a400:·2069·643d·2269·646d·3237·3032·3422·3e3c···id="idm27024">< | ||
| 0005a410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | 0005a410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0005a420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | 0005a420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0005a430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | 0005a430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 702, 15 lines modified | Offset 702, 15 lines modified | ||
| 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 704 | Severity: ···high | 704 | Severity: ···high |
| 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 706 | Identifiers:·CCE-86189-8 | 706 | Identifiers:·CCE-86189-8 |
| 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | 714 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 715 | kind:·MachineConfig | 715 | kind:·MachineConfig |
| 716 | spec: | 716 | spec: |
| Offset 721, 15 lines modified | Offset 721, 15 lines modified | ||
| 721 | ······units: | 721 | ······units: |
| 722 | ······-·name:·sshd.service | 722 | ······-·name:·sshd.service |
| 723 | ········enabled:·false | 723 | ········enabled:·false |
| 724 | ········mask:·true | 724 | ········mask:·true |
| 725 | ······-·name:·sshd.socket | 725 | ······-·name:·sshd.socket |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 733 | apiVersion:·machineconfiguration.openshift.io/v1 | 733 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 734 | kind:·MachineConfig | 734 | kind:·MachineConfig |
| 735 | spec: | 735 | spec: |
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f70:·7320·6f66·2032·3032·3 | 00037f70:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15097, 234 lines modified | Offset 15097, 234 lines modified | ||
| 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | ||
| 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aff0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b000:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b010:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b020:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b030:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b040:·3d22·6964·6d37·3235·3022·3e3c·7072·653e··="idm7250"><pre> | |||
| 0003b050:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b060:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b070:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b080:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b090:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b0a0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b0b0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b0c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b0d0:·3d22·2369·646d·3732·3531·2220·7461·6269··="#idm7251"·tabi | |||
| 0003b0e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b0f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b100:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b110:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b120:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b130:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003 | 0003b140:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b | 0003b150:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b160:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b170:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b180:·646d·3732·3531·223e·3c74·6162·6c65·2063··dm7251"><table·c | ||
| 0003b | 0003b190:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b1a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b1b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b1c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b1d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b1e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b1f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b200:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b210:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b220:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003b230:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003b240:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b250:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b | 0003b260:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b | 0003b270:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b130:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003b140:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003b150:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b160:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b170:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b180:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b190:·7461·7267·6574·3d22·2369·646d·3732·3531··target="#idm7251 | |||
| 0003b1a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b1b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b1f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b200:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b210:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b220:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b230:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b240:·2069·643d·2269·646d·3732·3531·223e·3c74···id="idm7251"><t | |||
| 0003b250:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b260:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b270:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b280:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b290:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b2d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b2e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b300:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b310:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b320:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b330:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b340:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b350:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b360:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b370:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003b380:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b390:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b3a0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b3b0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003b3c0:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b3d0:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b3e0:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003b3f0:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b400:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b410:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b420:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b430:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b440:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b450:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b460:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b470:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b480:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b4a0:·3d22·2369·646d·3732·3532·2220·7461·6269··="#idm7252"·tabi | |||
| 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b | 0003b280:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003b290:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| Max diff block lines reached; 2756663/2788733 bytes (98.85%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 102, 21 lines modified | Offset 102, 19 lines modified | ||
| 102 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 102 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 103 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 103 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 107 | ·············_\x8c_\x8i_\x8s············6.1.1 | 107 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 114 | package | 110 | [[packages]] |
| 111 | name·=·"aide" | ||
| 112 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | #·Remediation·is·applicable·only·in·certain·platforms | 118 | #·Remediation·is·applicable·only·in·certain·platforms |
| 121 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 119 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 146, 38 lines modified | Offset 144, 40 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 146 | ··-·low_complexity |
| 149 | ··-·low_disruption | 147 | ··-·low_disruption |
| 150 | ··-·medium_severity | 148 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | include·install_aide | 156 | include·install_aide |
| 169 | class·install_aide·{ | 157 | class·install_aide·{ |
| 170 | ··package·{·'aide': | 158 | ··package·{·'aide': |
| 171 | ····ensure·=>·'installed', | 159 | ····ensure·=>·'installed', |
| 172 | ··} | 160 | ··} |
| 173 | } | 161 | } |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | package·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | Run·the·following·command·to·generate·a·new·database: | 175 | Run·the·following·command·to·generate·a·new·database: |
| 176 | $·sudo·/usr/sbin/aide·--init | 176 | $·sudo·/usr/sbin/aide·--init |
| 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 179 | To·initiate·a·manual·check,·run·the·following·command: | 179 | To·initiate·a·manual·check,·run·the·following·command: |
| 180 | $·sudo·/usr/sbin/aide·--check | 180 | $·sudo·/usr/sbin/aide·--check |
| Offset 311, 51 lines modified | Offset 311, 51 lines modified | ||
| 311 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 311 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 312 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 312 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 313 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 313 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 314 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 314 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 315 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 315 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 316 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 316 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 317 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 317 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 319 | [[customizations.filesystem]] | ||
| 320 | mountpoint·=·"/home" | ||
| 321 | size·=·1073741824 | ||
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 319 | logvol·/home·1024 | 323 | logvol·/home·1024 |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 325 | part·/home | 329 | part·/home |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 327 | [[customizations.filesystem]] | ||
| 328 | mountpoint·=·"/home" | ||
| 329 | size·=·1073741824 | ||
| 330 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 330 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 331 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 331 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 332 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 332 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 333 | Severity: ···unknown | 333 | Severity: ···unknown |
| 334 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv | 334 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 335 | Identifiers:·CCE-88936-0 | 335 | Identifiers:·CCE-88936-0 |
| Max diff block lines reached; 223397/230143 bytes (97.07%) of diff not shown. | |||
| Offset 14320, 15 lines modified | Offset 14320, 15 lines modified | ||
| 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f60:·7320·6f66·2032·3032·3 | 00037f60:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15102, 235 lines modified | Offset 15102, 235 lines modified | ||
| 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b040:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b050:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b060:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b070:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b080:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b090:·2069·643d·2269·646d·3732·3530·223e·3c70···id="idm7250"><p | |||
| 0003b0a0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b0b0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b0c0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b040:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003b050:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b060:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b070:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b080:·3d22·6964·6d37·3235·3022·3e3c·7461·626c··="idm7250"><tabl | |||
| 0003b090:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b0a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b0b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b0c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b0d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b0e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b0f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b100:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b110:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b120:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b130:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b140:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b150:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b160:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b170:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b180:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003b190:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003b1a0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b1b0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b1c0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b1d0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b1e0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b1f0:·3235·3122·2074·6162·696e·6465·783d·2230··251"·tabindex="0 | |||
| 0003b200:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b210:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b220:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b230:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b240:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b250:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b260:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b270:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b280:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b290:·7365·2220·6964·3d22·6964·6d37·3235·3122··se"·id="idm7251" | |||
| 0003b2a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b300:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b310:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b320:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b330:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b340:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b350:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b360:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b370:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b380:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b390:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b3a0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b3b0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b3c0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b3d0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b3e0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b3f0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b400:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b410:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b420:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b430:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003b440:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b450:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b460:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b470:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b480:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b490:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b | 0003b0d0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b0e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b0f0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b | 0003b100:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b110:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b120:·6765·743d·2223·6964·6d37·3235·3122·2074··get="#idm7251"·t | ||
| 0003b | 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b | 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b | 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b | 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b | 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b | 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b190:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b1a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b1b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b1c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b1d0:·3d22·6964·6d37·3235·3122·3e3c·7461·626c··="idm7251"><tabl | |||
| 0003b1e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b1f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b200:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b210:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b220:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b560:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b570:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b580:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| Max diff block lines reached; 2851104/2883312 bytes (98.88%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 59 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 60 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 60 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 103, 21 lines modified | Offset 103, 19 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | package | 111 | [[packages]] |
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | #·Remediation·is·applicable·only·in·certain·platforms | 119 | #·Remediation·is·applicable·only·in·certain·platforms |
| 122 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 120 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 147, 38 lines modified | Offset 145, 40 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 145 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 146 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 147 | ··-·low_complexity |
| 150 | ··-·low_disruption | 148 | ··-·low_disruption |
| 151 | ··-·medium_severity | 149 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 150 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 151 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | include·install_aide | 157 | include·install_aide |
| 170 | class·install_aide·{ | 158 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 159 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 160 | ····ensure·=>·'installed', |
| 173 | ··} | 161 | ··} |
| 174 | } | 162 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·--add=aide | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 180 | To·initiate·a·manual·check,·run·the·following·command: | 180 | To·initiate·a·manual·check,·run·the·following·command: |
| 181 | $·sudo·/usr/sbin/aide·--check | 181 | $·sudo·/usr/sbin/aide·--check |
| Offset 795, 51 lines modified | Offset 795, 51 lines modified | ||
| 795 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 795 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 796 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 796 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 797 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 797 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 798 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 798 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 799 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 799 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 800 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 800 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 801 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 801 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 803 | [[customizations.filesystem]] | ||
| 804 | mountpoint·=·"/home" | ||
| 805 | size·=·1073741824 | ||
| 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 803 | logvol·/home·1024 | 807 | logvol·/home·1024 |
| 804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 805 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 809 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 806 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 810 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 807 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 811 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 808 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 812 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 809 | part·/home | 813 | part·/home |
| 810 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 811 | [[customizations.filesystem]] | ||
| 812 | mountpoint·=·"/home" | ||
| 813 | size·=·1073741824 | ||
| 814 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 814 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 815 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 815 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 816 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 816 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 817 | Severity: ···unknown | 817 | Severity: ···unknown |
| 818 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv | 818 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 819 | Identifiers:·CCE-88936-0 | 819 | Identifiers:·CCE-88936-0 |
| Max diff block lines reached; 231782/238475 bytes (97.19%) of diff not shown. | |||
| Offset 14322, 15 lines modified | Offset 14322, 15 lines modified | ||
| 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f80:·7320·6f66·2032·3032·3 | 00037f80:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15093, 234 lines modified | Offset 15093, 234 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003afc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3732·3530·223e·3c70·7265·3e3c·636f··dm7250"><pre><co | |||
| 0003b010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b030:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003afb0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003afc0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003afd0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003afe0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003aff0:·3235·3022·3e3c·7461·626c·6520·636c·6173··250"><table·clas | |||
| 0003b000:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b010:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b020:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b030:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b040:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b050:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b060:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b070:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b080:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b090:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b0a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b0b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b0c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b0d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b0e0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b0f0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003b100:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b110:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b120:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b130:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b140:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b150:·6765·743d·2223·6964·6d37·3235·3122·2074··get="#idm7251"·t | |||
| 0003b160:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b170:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b180:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b190:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b1a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b1b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b1c0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b1d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b1e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b1f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b200:·3d22·6964·6d37·3235·3122·3e3c·7461·626c··="idm7251"><tabl | |||
| 0003b210:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b220:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b230:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b240:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b250:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b260:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b270:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b280:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b290:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b2a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b2b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b2c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b2d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b2e0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b2f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b300:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b310:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b320:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b330:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b340:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b350:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b360:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b370:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b380:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b390:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b3a0:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003b3b0:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003b3c0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b3d0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b3e0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b3f0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b400:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003b | 0003b040:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b | 0003b050:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b | 0003b060:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b | 0003b070:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b | 0003b080:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b | 0003b090:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | ||
| 0003b | 0003b0a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b | 0003b0b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b | 0003b0c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b | 0003b0d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b | 0003b0e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b | 0003b0f0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b4d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b4e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b4f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b500:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b510:·646d·3732·3532·223e·3c74·6162·6c65·2063··dm7252"><table·c | |||
| 0003b520:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b530:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b540:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b550:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b560:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b570:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b580:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b | 0003b100:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| Max diff block lines reached; 1589304/1621374 bytes (98.02%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 118, 21 lines modified | Offset 118, 19 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package | 126 | [[packages]] |
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | 134 | #·Remediation·is·applicable·only·in·certain·platforms |
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 38 lines modified | Offset 160, 40 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 162 | ··-·low_complexity |
| 165 | ··-·low_disruption | 163 | ··-·low_disruption |
| 166 | ··-·medium_severity | 164 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·--add=aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | 172 | include·install_aide |
| 185 | class·install_aide·{ | 173 | class·install_aide·{ |
| 186 | ··package·{·'aide': | 174 | ··package·{·'aide': |
| 187 | ····ensure·=>·'installed', | 175 | ····ensure·=>·'installed', |
| 188 | ··} | 176 | ··} |
| 189 | } | 177 | } |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·install·aide | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 350, 57 lines modified | Offset 350, 57 lines modified | ||
| 350 | ····························SR·7.6 | 350 | ····························SR·7.6 |
| 351 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 351 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 352 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 352 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 353 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 353 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 355 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 355 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 356 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 356 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 358 | [[customizations.filesystem]] | ||
| 359 | mountpoint·=·"/home" | ||
| 360 | size·=·1073741824 | ||
| 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 358 | logvol·/home·1024 | 362 | logvol·/home·1024 |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 364 | part·/home | 368 | part·/home |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 366 | [[customizations.filesystem]] | ||
| 367 | mountpoint·=·"/home" | ||
| 368 | size·=·1073741824 | ||
| 369 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 369 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 370 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 370 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 371 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 371 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| 372 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the | 372 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the |
| 373 | mountpoint·can·instead·be·configured·later. | 373 | mountpoint·can·instead·be·configured·later. |
| 374 | ·············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is | 374 | ·············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is |
| Max diff block lines reached; 147123/153429 bytes (95.89%) of diff not shown. | |||
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037f70:·2032·3032·3 | 00037f70:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14771, 218 lines modified | Offset 14771, 218 lines modified | ||
| 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | ||
| 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039b90:·6469·6174·696f·6e20· | 00039b90:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039ba0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039ba0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00039bb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00039bc0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00039bd0:·643d·2269·646d·3130·3638·3722·3e3c·7461··d="idm10687"><ta | |||
| 00039be0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00039bf0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00039c00:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00039c10:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00039c20:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00039c30:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00039c40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039c50:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00039c60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039c70:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00039c80:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00039c90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039ca0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00039cb0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00039cc0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00039cd0:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 00039ce0:·7374·616c·6c20·646e·662d·6175·746f·6d61··stall·dnf-automa | |||
| 00039cf0:·7469·630a·3c2f·636f·6465·3e3c·2f70·7265··tic.</code></pre | |||
| 00039d00:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00039d10:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00039d20:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00039d30:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00039d40:·7267·6574·3d22·2369·646d·3130·3638·3822··rget="#idm10688" | |||
| 00039d50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00039d60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00039d70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00039d80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00039d90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00039da0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00039db0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00039 | 00039bb0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 00039 | 00039bc0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00039 | 00039bd0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00039 | 00039be0:·2220·6964·3d22·6964·6d31·3036·3837·223e··"·id="idm10687"> | ||
| 00039e00:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00039e10:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00039e20:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00039e30:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00039e40:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00039e50:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00039e60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039e70:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00039e80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039e90:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00039ea0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00039eb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039 | 00039bf0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 00039c00:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00039c10:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | |||
| 00039c20:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 00039c30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00039c40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00039c50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00039c60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039c70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039c80:·2369·646d·3130·3638·3822·2074·6162·696e··#idm10688"·tabin | |||
| 00039c90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039ca0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039cb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039cc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039cd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039ce0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 00039cf0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00039d00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039d10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039d20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039d30:·6d31·3036·3838·223e·3c74·6162·6c65·2063··m10688"><table·c | |||
| 00039d40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00039d50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00039d60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00039d70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00039d80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00039d90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039da0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00039db0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00039dc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039dd0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00039 | 00039de0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 00039ee0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039ef0:·3c63·6f64·653e·0a69·6620·2120·7270·6d20··<code>.if·!·rpm· | |||
| 00039f00:·2d71·202d·2d71·7569·6574·2022·646e·662d··-q·--quiet·"dnf- | |||
| 00039f10:·6175·746f·6d61·7469·6322·203b·2074·6865··automatic"·;·the | |||
| 00039 | 00039df0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 00039e00:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00039e10:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00039e20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00039e30:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 00039 | 00039e40:·7569·6574·2022·646e·662d·6175·746f·6d61··uiet·"dnf-automa | ||
| 00039 | 00039e50:·7469·6322·203b·2074·6865·6e0a·2020·2020··tic"·;·then.···· | ||
| 00039e60:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 00039e70:·646e·662d·6175·746f·6d61·7469·6322·0a66··dnf-automatic".f | |||
| 00039e80:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 00039e90:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039ea0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039eb0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00039ec0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00039ed0:·6574·3d22·2369·646d·3130·3638·3922·2074··et="#idm10689"·t | |||
| 00039ee0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| Max diff block lines reached; 370066/399928 bytes (92.53%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 84, 21 lines modified | Offset 84, 19 lines modified | ||
| 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 85 | ·············suitable·for·automatic,·regular·execution. | 85 | ·············suitable·for·automatic,·regular·execution. |
| 86 | Severity: ···medium | 86 | Severity: ···medium |
| 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 88 | Identifiers:·CCE-87561-7 | 88 | Identifiers:·CCE-87561-7 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | package | 92 | [[packages]] |
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 102 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 100 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 117, 38 lines modified | Offset 115, 40 lines modified | ||
| 117 | ··-·CCE-87561-7 | 115 | ··-·CCE-87561-7 |
| 118 | ··-·enable_strategy | 116 | ··-·enable_strategy |
| 119 | ··-·low_complexity | 117 | ··-·low_complexity |
| 120 | ··-·low_disruption | 118 | ··-·low_disruption |
| 121 | ··-·medium_severity | 119 | ··-·medium_severity |
| 122 | ··-·no_reboot_needed | 120 | ··-·no_reboot_needed |
| 123 | ··-·package_dnf-automatic_installed | 121 | ··-·package_dnf-automatic_installed |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=dnf-automatic | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"dnf-automatic" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | include·install_dnf-automatic | 127 | include·install_dnf-automatic |
| 140 | class·install_dnf-automatic·{ | 128 | class·install_dnf-automatic·{ |
| 141 | ··package·{·'dnf-automatic': | 129 | ··package·{·'dnf-automatic': |
| 142 | ····ensure·=>·'installed', | 130 | ····ensure·=>·'installed', |
| 143 | ··} | 131 | ··} |
| 144 | } | 132 | } |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·dnf-automatic | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·--add=dnf-automatic | ||
| 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 148 | automatic.conf. | 148 | automatic.conf. |
| 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9035, 21 lines modified | Offset 9035, 14 lines modified | ||
| 9035 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9035 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9036 | ····························A.9.1.2 | 9036 | ····························A.9.1.2 |
| 9037 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9037 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9038 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9038 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9039 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9039 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9040 | ·············_\x8c_\x8i_\x8s············2.1.3 | 9040 | ·············_\x8c_\x8i_\x8s············2.1.3 |
| 9041 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9041 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9042 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9043 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9044 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9045 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9046 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9047 | package·remove·dhcp | ||
| 9048 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9042 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9049 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9043 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9050 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9044 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9051 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9045 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9052 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9046 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9053 | #·CAUTION:·This·remediation·script·will·remove·dhcp | 9047 | #·CAUTION:·This·remediation·script·will·remove·dhcp |
| Offset 9080, 33 lines modified | Offset 9073, 40 lines modified | ||
| 9080 | ··-·PCI-DSSv4-2.2.4 | 9073 | ··-·PCI-DSSv4-2.2.4 |
| 9081 | ··-·disable_strategy | 9074 | ··-·disable_strategy |
| 9082 | ··-·low_complexity | 9075 | ··-·low_complexity |
| 9083 | ··-·low_disruption | 9076 | ··-·low_disruption |
| 9084 | ··-·medium_severity | 9077 | ··-·medium_severity |
| 9085 | ··-·no_reboot_needed | 9078 | ··-·no_reboot_needed |
| 9086 | ··-·package_dhcp_removed | 9079 | ··-·package_dhcp_removed |
| 9087 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9088 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9089 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9090 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 35092/40956 bytes (85.68%) of diff not shown. | |||
| Offset 14292, 16 lines modified | Offset 14292, 16 lines modified | ||
| 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·2861·7320·6f66·2032·3032·3 | 00037da0:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037db0:·3 | 00037db0:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15135, 235 lines modified | Offset 15135, 235 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b260:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b270:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b280:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b290:·2220·6964·3d22·6964·6d37·3235·3022·3e3c··"·id="idm7250">< | |||
| 0003b2a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b2b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b2c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b2d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b2e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b300:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b310:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b320:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b330:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b340:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b350:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b360:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b370:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b380:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b390:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b3a0:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003b3b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b3c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b3d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b3e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b3f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b400:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b410:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b420:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b430:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b440:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b450:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b460:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b470:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b480:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b490:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b4a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b4b0:·3235·3122·3e3c·7461·626c·6520·636c·6173··251"><table·clas | |||
| 0003b4c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b4d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b4e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b4f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b500:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b510:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b520:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b530:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b540:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b550:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b560:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b570:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b580:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b590:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b5a0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b5b0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b5c0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b5d0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b5e0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b5f0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b600:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b610:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b620:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b630:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b640:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b650:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b660:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b670:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b680:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b690:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b6a0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b6b0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b6c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b6e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b6f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b700:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b710:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b720:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b730:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b740:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b750:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b760:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b770:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b | 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b | 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b2a0:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | ||
| 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b7c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b7d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b7e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b7f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b800:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b810:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b820:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b830:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b840:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| Max diff block lines reached; 4188037/4220383 bytes (99.23%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 21 lines modified | Offset 108, 19 lines modified | ||
| 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ·············_\x8c_\x8i_\x8s············6.1.1 | 113 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | package | 116 | [[packages]] |
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | 124 | #·Remediation·is·applicable·only·in·certain·platforms |
| 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 152, 38 lines modified | Offset 150, 40 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 152 | ··-·low_complexity |
| 155 | ··-·low_disruption | 153 | ··-·low_disruption |
| 156 | ··-·medium_severity | 154 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·--add=aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 162 | include·install_aide |
| 175 | class·install_aide·{ | 163 | class·install_aide·{ |
| 176 | ··package·{·'aide': | 164 | ··package·{·'aide': |
| 177 | ····ensure·=>·'installed', | 165 | ····ensure·=>·'installed', |
| 178 | ··} | 166 | ··} |
| 179 | } | 167 | } |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·install·aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=aide | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 185 | To·initiate·a·manual·check,·run·the·following·command: | 185 | To·initiate·a·manual·check,·run·the·following·command: |
| 186 | $·sudo·/usr/sbin/aide·--check | 186 | $·sudo·/usr/sbin/aide·--check |
| Offset 672, 39 lines modified | Offset 672, 14 lines modified | ||
| 672 | » echo·"to·see·what·package·to·(re)install"·>&2 | 672 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 673 | » false··#·end·with·an·error·code | 673 | » false··#·end·with·an·error·code |
| 674 | elif·test·"$rc"·!=·0;·then | 674 | elif·test·"$rc"·!=·0;·then |
| 675 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 675 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 676 | » false··#·end·with·an·error·code | 676 | » false··#·end·with·an·error·code |
| 677 | fi | 677 | fi |
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 679 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 680 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 681 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 682 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 683 | --- | ||
| 684 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 685 | kind:·MachineConfig | ||
| 686 | spec: | ||
| 687 | ··config: | ||
| 688 | ····ignition: | ||
| 689 | ······version:·3.1.0 | ||
| 690 | ····systemd: | ||
| 691 | ······units: | ||
| 692 | ········-·name:·configure-crypto-policy.service | ||
| 693 | ··········enabled:·true | ||
| 694 | ··········contents:·| | ||
| 695 | ············[Unit] | ||
| 696 | ············Before=kubelet.service | ||
| 697 | ············[Service] | ||
| 698 | ············Type=oneshot | ||
| 699 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 700 | ············RemainAfterExit=yes | ||
| 701 | ············[Install] | ||
| 702 | ············WantedBy=multi-user.target | ||
| 703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 389765/395444 bytes (98.56%) of diff not shown. | |||
| Offset 14293, 15 lines modified | Offset 14293, 15 lines modified | ||
| 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037db0:·2032·3032·3 | 00037db0:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15104, 235 lines modified | Offset 15104, 235 lines modified | ||
| 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b060:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b070:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b080:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b090:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b0a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b0b0:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | |||
| 0003b0c0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b0d0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b0e0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b060:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b070:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b080:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b090:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0a0:·2269·646d·3732·3530·223e·3c74·6162·6c65··"idm7250"><table | |||
| 0003b0b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b0d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b0e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b0f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b100:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b110:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b120:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b130:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b140:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b150:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b160:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b170:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b180:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b190:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b1a0:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003b1b0:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003b1c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b1d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b1e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b1f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b200:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b210:·3531·2220·7461·6269·6e64·6578·3d22·3022··51"·tabindex="0" | |||
| 0003b220:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b230:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b240:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b250:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b260:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b270:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b280:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b290:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b2b0:·6522·2069·643d·2269·646d·3732·3531·223e··e"·id="idm7251"> | |||
| 0003b2c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b2f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b300:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b310:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b320:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b330:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b340:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b350:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b360:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b370:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b380:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b390:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b3a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b3b0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b3c0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b3d0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b3e0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b3f0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b400:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b410:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b420:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b430:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b440:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b450:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003b460:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b470:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b480:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b490:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b4a0:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b4b0:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b | 0003b0f0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b100:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b110:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b120:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b130:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b140:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | ||
| 0003b | 0003b150:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b160:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b170:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b180:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b190:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b1a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1b0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b1c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b1d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1f0:·2269·646d·3732·3531·223e·3c74·6162·6c65··"idm7251"><table | |||
| 0003b200:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b210:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b220:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b230:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b240:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b580:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b590:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b5a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 2405008/2437216 bytes (98.68%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 21 lines modified | Offset 103, 19 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | package | 111 | [[packages]] |
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | #·Remediation·is·applicable·only·in·certain·platforms | 119 | #·Remediation·is·applicable·only·in·certain·platforms |
| 122 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 120 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 147, 38 lines modified | Offset 145, 40 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 145 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 146 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 147 | ··-·low_complexity |
| 150 | ··-·low_disruption | 148 | ··-·low_disruption |
| 151 | ··-·medium_severity | 149 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 150 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 151 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | include·install_aide | 157 | include·install_aide |
| 170 | class·install_aide·{ | 158 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 159 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 160 | ····ensure·=>·'installed', |
| 173 | ··} | 161 | ··} |
| 174 | } | 162 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·--add=aide | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 180 | To·initiate·a·manual·check,·run·the·following·command: | 180 | To·initiate·a·manual·check,·run·the·following·command: |
| 181 | $·sudo·/usr/sbin/aide·--check | 181 | $·sudo·/usr/sbin/aide·--check |
| Offset 667, 39 lines modified | Offset 667, 14 lines modified | ||
| 667 | » echo·"to·see·what·package·to·(re)install"·>&2 | 667 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 668 | » false··#·end·with·an·error·code | 668 | » false··#·end·with·an·error·code |
| 669 | elif·test·"$rc"·!=·0;·then | 669 | elif·test·"$rc"·!=·0;·then |
| 670 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 670 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 671 | » false··#·end·with·an·error·code | 671 | » false··#·end·with·an·error·code |
| 672 | fi | 672 | fi |
| 673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 674 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 675 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 676 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 677 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 678 | --- | ||
| 679 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 680 | kind:·MachineConfig | ||
| 681 | spec: | ||
| 682 | ··config: | ||
| 683 | ····ignition: | ||
| 684 | ······version:·3.1.0 | ||
| 685 | ····systemd: | ||
| 686 | ······units: | ||
| 687 | ········-·name:·configure-crypto-policy.service | ||
| 688 | ··········enabled:·true | ||
| 689 | ··········contents:·| | ||
| 690 | ············[Unit] | ||
| 691 | ············Before=kubelet.service | ||
| 692 | ············[Service] | ||
| 693 | ············Type=oneshot | ||
| 694 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 695 | ············RemainAfterExit=yes | ||
| 696 | ············[Install] | ||
| 697 | ············WantedBy=multi-user.target | ||
| 698 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 265477/271166 bytes (97.90%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15095, 235 lines modified | Offset 15095, 235 lines modified | ||
| 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003afd0:·6961·7469·6f6e·20 | 0003afd0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003afe0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003aff0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b020:·2069·643d·2269·646d·3732·3530·223e·3c70···id="idm7250"><p | |||
| 0003b030:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b040:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b050:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b060:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b070:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b080:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b090:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b0a0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b0b0:·6765·743d·2223·6964·6d37·3235·3122·2074··get="#idm7251"·t | |||
| 0003b0c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b0d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b0e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b0f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b100:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b110:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b120:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003 | 0003b130:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003 | 0003b140:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b | 0003b150:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b | 0003b160:·3d22·6964·6d37·3235·3122·3e3c·7461·626c··="idm7251"><tabl | ||
| 0003b | 0003b170:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b | 0003b180:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b | 0003b190:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b | 0003b1a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b | 0003b1b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b | 0003b1c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b1d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b1e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b1f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b200:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b210:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003b220:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b230:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003b240:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003b | 0003b250:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b260:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b110:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003b120:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003b130:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b140:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b150:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b160:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b170:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b180:·3235·3122·2074·6162·696e·6465·783d·2230··251"·tabindex="0 | |||
| 0003b190:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b1a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b1f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b200:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b210:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b220:·7365·2220·6964·3d22·6964·6d37·3235·3122··se"·id="idm7251" | |||
| 0003b230:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b240:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b250:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b260:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b270:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b280:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b290:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b2e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b2f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b300:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b310:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b320:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b330:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b340:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b350:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b360:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b370:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b380:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b390:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b3a0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b3b0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b3c0:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003b3d0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b3e0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b3f0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b400:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b | 0003b270:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003b280:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b290:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b2a0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b2b0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b2c0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b2d0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b2e0:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b2f0:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b300:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003b310:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003b320:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b330:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b340:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| Max diff block lines reached; 2115304/2147512 bytes (98.50%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 21 lines modified | Offset 101, 19 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | package | 109 | [[packages]] |
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | 117 | #·Remediation·is·applicable·only·in·certain·platforms |
| 120 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 118 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 145, 38 lines modified | Offset 143, 40 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 143 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 144 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 145 | ··-·low_complexity |
| 148 | ··-·low_disruption | 146 | ··-·low_disruption |
| 149 | ··-·medium_severity | 147 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 148 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 149 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·--add=aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | include·install_aide | 155 | include·install_aide |
| 168 | class·install_aide·{ | 156 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 157 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 158 | ····ensure·=>·'installed', |
| 171 | ··} | 159 | ··} |
| 172 | } | 160 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·--add=aide | ||
| 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 174 | Run·the·following·command·to·generate·a·new·database: | 174 | Run·the·following·command·to·generate·a·new·database: |
| 175 | $·sudo·/usr/sbin/aide·--init | 175 | $·sudo·/usr/sbin/aide·--init |
| 176 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 176 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 177 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 177 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 178 | To·initiate·a·manual·check,·run·the·following·command: | 178 | To·initiate·a·manual·check,·run·the·following·command: |
| 179 | $·sudo·/usr/sbin/aide·--check | 179 | $·sudo·/usr/sbin/aide·--check |
| Offset 665, 39 lines modified | Offset 665, 14 lines modified | ||
| 665 | » echo·"to·see·what·package·to·(re)install"·>&2 | 665 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 666 | » false··#·end·with·an·error·code | 666 | » false··#·end·with·an·error·code |
| 667 | elif·test·"$rc"·!=·0;·then | 667 | elif·test·"$rc"·!=·0;·then |
| 668 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 668 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 669 | » false··#·end·with·an·error·code | 669 | » false··#·end·with·an·error·code |
| 670 | fi | 670 | fi |
| 671 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 672 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 673 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 674 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 675 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 676 | --- | ||
| 677 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 678 | kind:·MachineConfig | ||
| 679 | spec: | ||
| 680 | ··config: | ||
| 681 | ····ignition: | ||
| 682 | ······version:·3.1.0 | ||
| 683 | ····systemd: | ||
| 684 | ······units: | ||
| 685 | ········-·name:·configure-crypto-policy.service | ||
| 686 | ··········enabled:·true | ||
| 687 | ··········contents:·| | ||
| 688 | ············[Unit] | ||
| 689 | ············Before=kubelet.service | ||
| 690 | ············[Service] | ||
| 691 | ············Type=oneshot | ||
| 692 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 693 | ············RemainAfterExit=yes | ||
| 694 | ············[Install] | ||
| 695 | ············WantedBy=multi-user.target | ||
| 696 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 671 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 237786/243485 bytes (97.66%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15127, 234 lines modified | Offset 15127, 234 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b1d0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b1e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b1f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b200:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b210:·3530·223e·3c74·6162·6c65·2063·6c61·7373··50"><table·class | |||
| 0003b220:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b230:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b240:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b250:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b260:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b270:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b280:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b290:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b2a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2b0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b2c0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b2d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b2e0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b2f0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b300:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b310:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003b320:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003b330:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b340:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b350:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b360:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b370:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b380:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b390:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b3a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b3b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b3c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b3d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b3e0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b3f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b400:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b410:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b420:·2269·646d·3732·3531·223e·3c74·6162·6c65··"idm7251"><table | |||
| 0003b430:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b440:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b450:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b460:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b470:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b480:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b490:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b4a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b4b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b4c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b4d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b4e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b4f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b500:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b510:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b520:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b530:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b540:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b550:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b560:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b570:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b580:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b590:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b5a0:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b5b0:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003b5c0:·2020·2020·646e·6620·696e·7374·616c·6c20······dnf·install· | |||
| 0003b5d0:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003b5e0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b5f0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b600:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b610:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b620:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b630:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b640:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b650:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b660:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b670:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b680:·646d·3732·3532·2220·7461·6269·6e64·6578··dm7252"·tabindex | |||
| 0003b690:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b6a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b6b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b6c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b6d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b6e0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b | 0003b1e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b | 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b730:·6d37·3235·3222·3e3c·7461·626c·6520·636c··m7252"><table·cl | |||
| 0003b740:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b | 0003b220:·6d37·3235·3022·3e3c·7072·653e·3c63·6f64··m7250"><pre><cod | ||
| 0003b230:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b240:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b250:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b260:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b270:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b280:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b290:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2b0:·646d·3732·3531·2220·7461·6269·6e64·6578··dm7251"·tabindex | |||
| 0003b2c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b2e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b300:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| Max diff block lines reached; 4040949/4073019 bytes (99.21%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 21 lines modified | Offset 106, 19 lines modified | ||
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.1 | 111 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package | 114 | [[packages]] |
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | 122 | #·Remediation·is·applicable·only·in·certain·platforms |
| 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 123 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 150, 38 lines modified | Offset 148, 40 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 150 | ··-·low_complexity |
| 153 | ··-·low_disruption | 151 | ··-·low_disruption |
| 154 | ··-·medium_severity | 152 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 160 | include·install_aide |
| 173 | class·install_aide·{ | 161 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 162 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 163 | ····ensure·=>·'installed', |
| 176 | ··} | 164 | ··} |
| 177 | } | 165 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 183 | To·initiate·a·manual·check,·run·the·following·command: | 183 | To·initiate·a·manual·check,·run·the·following·command: |
| 184 | $·sudo·/usr/sbin/aide·--check | 184 | $·sudo·/usr/sbin/aide·--check |
| Offset 670, 39 lines modified | Offset 670, 14 lines modified | ||
| 670 | » echo·"to·see·what·package·to·(re)install"·>&2 | 670 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 671 | » false··#·end·with·an·error·code | 671 | » false··#·end·with·an·error·code |
| 672 | elif·test·"$rc"·!=·0;·then | 672 | elif·test·"$rc"·!=·0;·then |
| 673 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 673 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 674 | » false··#·end·with·an·error·code | 674 | » false··#·end·with·an·error·code |
| 675 | fi | 675 | fi |
| 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 681 | --- | ||
| 682 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 683 | kind:·MachineConfig | ||
| 684 | spec: | ||
| 685 | ··config: | ||
| 686 | ····ignition: | ||
| 687 | ······version:·3.1.0 | ||
| 688 | ····systemd: | ||
| 689 | ······units: | ||
| 690 | ········-·name:·configure-crypto-policy.service | ||
| 691 | ··········enabled:·true | ||
| 692 | ··········contents:·| | ||
| 693 | ············[Unit] | ||
| 694 | ············Before=kubelet.service | ||
| 695 | ············[Service] | ||
| 696 | ············Type=oneshot | ||
| 697 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 698 | ············RemainAfterExit=yes | ||
| 699 | ············[Install] | ||
| 700 | ············WantedBy=multi-user.target | ||
| 701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 374819/380518 bytes (98.50%) of diff not shown. | |||
| Offset 14306, 15 lines modified | Offset 14306, 15 lines modified | ||
| 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e80:·3032·3 | 00037e80:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16675, 179 lines modified | Offset 16675, 179 lines modified | ||
| 00041220:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00041220:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00041230:·6d37·3933·3922·2074·6162·696e·6465·783d··m7939"·tabindex= | 00041230:·6d37·3933·3922·2074·6162·696e·6465·783d··m7939"·tabindex= | ||
| 00041240:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00041240:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00041250:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00041250:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00041260:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00041260:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00041270:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00041270:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00041280:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00041280:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00041290:·6564·6961·7469·6f6e·204 | 00041290:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 000412a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000412b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000412c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000412d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000412e0:·3739·3339·223e·3c74·6162·6c65·2063·6c61··7939"><table·cla | |||
| 000412f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041300:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041310:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041320:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041330:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000412a0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 000412b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 000412c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000412d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000412e0:·6964·6d37·3933·3922·3e3c·7461·626c·6520··idm7939"><table· | |||
| 000412f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00041300:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00041310:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00041320:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00041330:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00041340:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00041350:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00041360:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 000413 | 00041340:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 00041380:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 000413 | 00041350:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 00041360:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00041370:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00041380:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00041390:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 000413a0:· | 000413a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 000413b0:· | 000413b0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 000413c0:· | 000413c0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 000413d0:· | 000413d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 000413e0:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 000413f0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 00041400:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 00041410:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 00041420:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 00041430:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 00041440:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 00041450:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 00041460:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 00041470:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 00041480:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 00041490:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 000414a0:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 000414b0:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 000414c0:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 000414d0:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 000414e0:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 000414f0:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 00041500:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 00041510:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 00041520:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 00041530:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 00041540:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 00041550:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 00041560:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 00041570:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 00041580:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 00041590:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 000415a0:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 000415b0:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 000415c0:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 000415d0:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 000415e0:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 000415f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00041600:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00041610:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00041620:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00041630:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00041640:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | |||
| 00041650:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00041660:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00041670:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00041680:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00041690:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 000416a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 000416b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 000416c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000416d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000416e0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 000416f0:·3430·223e·3c74·6162·6c65·2063·6c61·7373··40"><table·class | |||
| 00041700:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041710:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00041720:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041730:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041740:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041750:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041760:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00041770:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041780:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041790:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000417a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000417b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000417c0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 000417d0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 000417e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00041 | 000413e0:·2d20·6e61·6d65·3a20·5843·4344·4620·5661··-·name:·XCCDF·Va | ||
| 00041 | 000413f0:·6c75·6520·7661·725f·7379·7374·656d·5f63··lue·var_system_c | ||
| 00041 | 00041400:·7279·7074·6f5f·706f·6c69·6379·2023·2070··rypto_policy·#·p | ||
| 00041 | 00041410:·726f·6d6f·7465·2074·6f20·7661·7269·6162··romote·to·variab | ||
| Max diff block lines reached; 1615925/1640405 bytes (98.51%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:10 | 46 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 442, 39 lines modified | Offset 442, 14 lines modified | ||
| 442 | » echo·"to·see·what·package·to·(re)install"·>&2 | 442 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 443 | » false··#·end·with·an·error·code | 443 | » false··#·end·with·an·error·code |
| 444 | elif·test·"$rc"·!=·0;·then | 444 | elif·test·"$rc"·!=·0;·then |
| 445 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 445 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 446 | » false··#·end·with·an·error·code | 446 | » false··#·end·with·an·error·code |
| 447 | fi | 447 | fi |
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 453 | --- | ||
| 454 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 455 | kind:·MachineConfig | ||
| 456 | spec: | ||
| 457 | ··config: | ||
| 458 | ····ignition: | ||
| 459 | ······version:·3.1.0 | ||
| 460 | ····systemd: | ||
| 461 | ······units: | ||
| 462 | ········-·name:·configure-crypto-policy.service | ||
| 463 | ··········enabled:·true | ||
| 464 | ··········contents:·| | ||
| 465 | ············[Unit] | ||
| 466 | ············Before=kubelet.service | ||
| 467 | ············[Service] | ||
| 468 | ············Type=oneshot | ||
| 469 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 470 | ············RemainAfterExit=yes | ||
| 471 | ············[Install] | ||
| 472 | ············WantedBy=multi-user.target | ||
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 478 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 453 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 479 | ··set_fact: | 454 | ··set_fact: |
| Offset 519, 14 lines modified | Offset 494, 39 lines modified | ||
| 519 | ··-·PCI-DSSv4-2.2.7 | 494 | ··-·PCI-DSSv4-2.2.7 |
| 520 | ··-·configure_crypto_policy | 495 | ··-·configure_crypto_policy |
| 521 | ··-·high_severity | 496 | ··-·high_severity |
| 522 | ··-·low_complexity | 497 | ··-·low_complexity |
| 523 | ··-·low_disruption | 498 | ··-·low_disruption |
| 524 | ··-·no_reboot_needed | 499 | ··-·no_reboot_needed |
| 525 | ··-·restrict_strategy | 500 | ··-·restrict_strategy |
| 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 502 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 503 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 504 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 505 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 506 | --- | ||
| 507 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 508 | kind:·MachineConfig | ||
| 509 | spec: | ||
| 510 | ··config: | ||
| 511 | ····ignition: | ||
| 512 | ······version:·3.1.0 | ||
| 513 | ····systemd: | ||
| 514 | ······units: | ||
| 515 | ········-·name:·configure-crypto-policy.service | ||
| 516 | ··········enabled:·true | ||
| 517 | ··········contents:·| | ||
| 518 | ············[Unit] | ||
| 519 | ············Before=kubelet.service | ||
| 520 | ············[Service] | ||
| 521 | ············Type=oneshot | ||
| 522 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 523 | ············RemainAfterExit=yes | ||
| 524 | ············[Install] | ||
| 525 | ············WantedBy=multi-user.target | ||
| 526 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 526 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 527 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 527 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 528 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 528 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 529 | Severity: ···medium | 529 | Severity: ···medium |
| 530 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 530 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 531 | Identifiers:·CCE-88557-4 | 531 | Identifiers:·CCE-88557-4 |
| 532 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 532 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 865, 21 lines modified | Offset 865, 19 lines modified | ||
| 865 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 865 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 866 | The·rear·package·can·be·installed·with·the·following·command: | 866 | The·rear·package·can·be·installed·with·the·following·command: |
| 867 | $·sudo·dnf·install·rear | 867 | $·sudo·dnf·install·rear |
| 868 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 868 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 869 | Severity: ···medium | 869 | Severity: ···medium |
| 870 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 870 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 871 | Identifiers:·CCE-90643-8 | 871 | Identifiers:·CCE-90643-8 |
| 872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 873 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 874 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 875 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 876 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 877 | package | 873 | [[packages]] |
| 874 | name·=·"rear" | ||
| 875 | version·=·"*" | ||
| 878 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 876 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 879 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 877 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 880 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 878 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 881 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 879 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 882 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 880 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 883 | #·Remediation·is·applicable·only·in·certain·platforms | 881 | #·Remediation·is·applicable·only·in·certain·platforms |
| 884 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 882 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 909, 38 lines modified | Offset 907, 40 lines modified | ||
| 909 | ··-·CCE-90643-8 | 907 | ··-·CCE-90643-8 |
| 910 | ··-·enable_strategy | 908 | ··-·enable_strategy |
| 911 | ··-·low_complexity | 909 | ··-·low_complexity |
| 912 | ··-·low_disruption | 910 | ··-·low_disruption |
| 913 | ··-·medium_severity | 911 | ··-·medium_severity |
| 914 | ··-·no_reboot_needed | 912 | ··-·no_reboot_needed |
| Max diff block lines reached; 142369/149024 bytes (95.53%) of diff not shown. | |||
| Offset 14325, 16 lines modified | Offset 14325, 16 lines modified | ||
| 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fb0:·2028·6173·206f·6620·3230·323 | 00037fb0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037fc0:·323 | 00037fc0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16739, 178 lines modified | Offset 16739, 178 lines modified | ||
| 00041620:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 00041620:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 00041630:·3933·3922·2074·6162·696e·6465·783d·2230··939"·tabindex="0 | 00041630:·3933·3922·2074·6162·696e·6465·783d·2230··939"·tabindex="0 | ||
| 00041640:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00041640:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00041650:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00041650:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00041660:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00041660:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00041670:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00041670:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00041680:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00041680:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00041690:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 000416a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 000416b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000416c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000416d0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 000416e0:·3339·223e·3c74·6162·6c65·2063·6c61·7373··39"><table·class | |||
| 000416f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041690:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 000416a0:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 000416b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000416c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000416d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000416e0:·6d37·3933·3922·3e3c·7461·626c·6520·636c··m7939"><table·cl | |||
| 000416f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041700:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000417 | 00041700:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 00041710:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041720:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041730:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041720:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041730:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041740:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00041750:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00041760:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 000417 | 00041740:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00041780:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000417 | 00041750:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00041760:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041770:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041780:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00041790:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000417a0:· | 000417a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 000417b0:· | 000417b0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 000417c0:· | 000417c0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 000417d0:·6 | 000417d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 000417e0:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | |||
| 000417f0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00041800:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00041810:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00041820:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 00041830:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 00041840:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 00041850:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 00041860:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 00041870:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 00041880:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 00041890:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 000418a0:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 000418b0:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 000418c0:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 000418d0:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 000418e0:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 000418f0:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 00041900:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 00041910:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 00041920:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 00041930:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 00041940:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 00041950:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 00041960:·6963·6965·7320·2d2d·7365·7420·7b7b·2e76··icies·--set·{{.v | |||
| 00041970:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 00041980:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | |||
| 00041990:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 000419a0:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 000419b0:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 000419c0:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 000419d0:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 000419e0:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 000419f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00041a00:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00041a10:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00041a20:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00041a30:·2d74·6172·6765·743d·2223·6964·6d37·3934··-target="#idm794 | |||
| 00041a40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 00041a50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00041a60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00041a70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00041a80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00041a90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00041aa0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00041ab0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00041ac0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00041ad0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00041ae0:·7073·6522·2069·643d·2269·646d·3739·3430··pse"·id="idm7940 | |||
| 00041af0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00041b00:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00041b10:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00041b20:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00041b30:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00041b40:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00041b50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00041b60:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00041b70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00041b80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00041b90:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00041ba0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00041bb0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00041bc0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 00041bd0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00041be0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00041 | 000417e0:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | ||
| 00041 | 000417f0:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | ||
| 00041 | 00041800:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | ||
| Max diff block lines reached; 2465385/2489865 bytes (99.02%) of diff not shown. | |||
| Offset 48, 15 lines modified | Offset 48, 15 lines modified | ||
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act |
| 49 | ··············(HIPAA) | 49 | ··············(HIPAA) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:redhat:enterprise_linux:10 | 52 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 457, 39 lines modified | Offset 457, 14 lines modified | ||
| 457 | » echo·"to·see·what·package·to·(re)install"·>&2 | 457 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 458 | » false··#·end·with·an·error·code | 458 | » false··#·end·with·an·error·code |
| 459 | elif·test·"$rc"·!=·0;·then | 459 | elif·test·"$rc"·!=·0;·then |
| 460 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 460 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 461 | » false··#·end·with·an·error·code | 461 | » false··#·end·with·an·error·code |
| 462 | fi | 462 | fi |
| 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 468 | --- | ||
| 469 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 470 | kind:·MachineConfig | ||
| 471 | spec: | ||
| 472 | ··config: | ||
| 473 | ····ignition: | ||
| 474 | ······version:·3.1.0 | ||
| 475 | ····systemd: | ||
| 476 | ······units: | ||
| 477 | ········-·name:·configure-crypto-policy.service | ||
| 478 | ··········enabled:·true | ||
| 479 | ··········contents:·| | ||
| 480 | ············[Unit] | ||
| 481 | ············Before=kubelet.service | ||
| 482 | ············[Service] | ||
| 483 | ············Type=oneshot | ||
| 484 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 485 | ············RemainAfterExit=yes | ||
| 486 | ············[Install] | ||
| 487 | ············WantedBy=multi-user.target | ||
| 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 493 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 468 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 494 | ··set_fact: | 469 | ··set_fact: |
| Offset 534, 14 lines modified | Offset 509, 39 lines modified | ||
| 534 | ··-·PCI-DSSv4-2.2.7 | 509 | ··-·PCI-DSSv4-2.2.7 |
| 535 | ··-·configure_crypto_policy | 510 | ··-·configure_crypto_policy |
| 536 | ··-·high_severity | 511 | ··-·high_severity |
| 537 | ··-·low_complexity | 512 | ··-·low_complexity |
| 538 | ··-·low_disruption | 513 | ··-·low_disruption |
| 539 | ··-·no_reboot_needed | 514 | ··-·no_reboot_needed |
| 540 | ··-·restrict_strategy | 515 | ··-·restrict_strategy |
| 516 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 517 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 518 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 519 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 520 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 521 | --- | ||
| 522 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 523 | kind:·MachineConfig | ||
| 524 | spec: | ||
| 525 | ··config: | ||
| 526 | ····ignition: | ||
| 527 | ······version:·3.1.0 | ||
| 528 | ····systemd: | ||
| 529 | ······units: | ||
| 530 | ········-·name:·configure-crypto-policy.service | ||
| 531 | ··········enabled:·true | ||
| 532 | ··········contents:·| | ||
| 533 | ············[Unit] | ||
| 534 | ············Before=kubelet.service | ||
| 535 | ············[Service] | ||
| 536 | ············Type=oneshot | ||
| 537 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 538 | ············RemainAfterExit=yes | ||
| 539 | ············[Install] | ||
| 540 | ············WantedBy=multi-user.target | ||
| 541 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 541 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 542 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 542 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 543 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 543 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 544 | Severity: ···medium | 544 | Severity: ···medium |
| 545 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 545 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 546 | Identifiers:·CCE-88557-4 | 546 | Identifiers:·CCE-88557-4 |
| 547 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 547 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 633, 29 lines modified | Offset 633, 29 lines modified | ||
| 633 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) | 633 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) |
| 634 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 | 634 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 |
| 635 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 635 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 636 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 | 636 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 |
| 637 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 | 637 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 |
| 638 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 638 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 639 | ·············_\x8c_\x8i_\x8s············1.1.2.7.1 | 639 | ·············_\x8c_\x8i_\x8s············1.1.2.7.1 |
| 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 641 | [[customizations.filesystem]] | ||
| 642 | mountpoint·=·"/var/log/audit" | ||
| 643 | size·=·10737418240 | ||
| 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 641 | logvol·/var/log/audit·10240 | 645 | logvol·/var/log/audit·10240 |
| 642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 647 | part·/var/log/audit | 651 | part·/var/log/audit |
| 648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 649 | [[customizations.filesystem]] | ||
| 650 | mountpoint·=·"/var/log/audit" | ||
| 651 | size·=·10737418240 | ||
| 652 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules | 652 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules |
| 653 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 653 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 654 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. | 654 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. |
| Max diff block lines reached; 202295/208356 bytes (97.09%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2028·6173·206f·6620·3230·323 | 00037ef0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037f00:·323 | 00037f00:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16533, 235 lines modified | Offset 16533, 235 lines modified | ||
| 00040940:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00040940:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00040950:·743d·2223·6964·6d37·3235·3022·2074·6162··t="#idm7250"·tab | 00040950:·743d·2223·6964·6d37·3235·3022·2074·6162··t="#idm7250"·tab | ||
| 00040960:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00040960:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00040970:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00040970:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00040980:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00040980:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00040990:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00040990:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 000409a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 000409a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 000409b0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 000409b0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 000409c0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 000409c0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 000409d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000409e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000409f0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 00040a00:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 00040a10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040a20:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040a30:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040a40:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040a50:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040a60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040a70:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040a80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040a90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040aa0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040ab0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040ac0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040ad0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040ae0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040af0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00040b00:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 00040b10:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040b20:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040b30:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00040b40:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00040b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00040b60:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 00040b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00040b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00040b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00040bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00040be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040c10:·6964·6d37·3235·3122·3e3c·7461·626c·6520··idm7251"><table· | |||
| 00040c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00040c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00040c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00040c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00040c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00040c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00040c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00040cf0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040d00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040d10:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 00040d20:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 00040d30:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 00040d40:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 00040d50:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 00040d60:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 00040d70:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 00040d80:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 00040d90:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 00040da0:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 00040db0:·2020·2064·6e66·2069·6e73·7461·6c6c·202d·····dnf·install·- | |||
| 00040dc0:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 00040dd0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 00040de0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 00040df0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 00040e00:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 00040e10:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 00040e20:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040e30:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040e40:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040e50:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040e60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040e70:·6d37·3235·3222·2074·6162·696e·6465·783d··m7252"·tabindex= | |||
| 00040e80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040e90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040ea0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040eb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040ec0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040ed0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 00040 | 000409d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 00040 | 000409e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 00040 | 000409f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 00040 | 00040a00:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 00040f20:·3732·3532·223e·3c74·6162·6c65·2063·6c61··7252"><table·cla | |||
| 00040f30:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040f40:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040f50:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040f60:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040f70:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040f80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040 | 00040a10:·3732·3530·223e·3c70·7265·3e3c·636f·6465··7250"><pre><code | ||
| 00040a20:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 00040a30:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 00040a40:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00040a50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040a60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040a70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040a80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| Max diff block lines reached; 2479195/2511541 bytes (98.71%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Base | 46 | ··············Base |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 429, 21 lines modified | Offset 429, 19 lines modified | ||
| 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 434 | ·············_\x8c_\x8i_\x8s············6.1.1 | 434 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 441 | package | 437 | [[packages]] |
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 447 | #·Remediation·is·applicable·only·in·certain·platforms | 445 | #·Remediation·is·applicable·only·in·certain·platforms |
| 448 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 446 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 473, 38 lines modified | Offset 471, 40 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 471 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·enable_strategy | 472 | ··-·enable_strategy |
| 475 | ··-·low_complexity | 473 | ··-·low_complexity |
| 476 | ··-·low_disruption | 474 | ··-·low_disruption |
| 477 | ··-·medium_severity | 475 | ··-·medium_severity |
| 478 | ··-·no_reboot_needed | 476 | ··-·no_reboot_needed |
| 479 | ··-·package_aide_installed | 477 | ··-·package_aide_installed |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 485 | package·--add=aide | ||
| 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 487 | [[packages]] | ||
| 488 | name·=·"aide" | ||
| 489 | version·=·"*" | ||
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 491 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 492 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 493 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 494 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 495 | include·install_aide | 483 | include·install_aide |
| 496 | class·install_aide·{ | 484 | class·install_aide·{ |
| 497 | ··package·{·'aide': | 485 | ··package·{·'aide': |
| 498 | ····ensure·=>·'installed', | 486 | ····ensure·=>·'installed', |
| 499 | ··} | 487 | ··} |
| 500 | } | 488 | } |
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 494 | package·install·aide | ||
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 500 | package·--add=aide | ||
| 501 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 501 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 502 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 502 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 503 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 503 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 504 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 504 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 621, 14 lines modified | Offset 621, 18 lines modified | ||
| 621 | Identifiers:·CCE-86982-6 | 621 | Identifiers:·CCE-86982-6 |
| 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 623 | ·············_\x8i_\x8s_\x8m······1446 | 623 | ·············_\x8i_\x8s_\x8m······1446 |
| 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 629 | [customizations] | ||
| 630 | fips·=·true | ||
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 629 | #·Remediation·is·applicable·only·in·certain·platforms | 632 | #·Remediation·is·applicable·only·in·certain·platforms |
| 630 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 633 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 631 | var_system_crypto_policy='FIPS' | 634 | var_system_crypto_policy='FIPS' |
| Offset 755, 18 lines modified | Offset 759, 14 lines modified | ||
| 755 | ··-·NIST-800-53-SC-13 | 759 | ··-·NIST-800-53-SC-13 |
| 756 | ··-·enable_fips_mode | 760 | ··-·enable_fips_mode |
| 757 | ··-·high_severity | 761 | ··-·high_severity |
| 758 | ··-·medium_complexity | 762 | ··-·medium_complexity |
| 759 | ··-·medium_disruption | 763 | ··-·medium_disruption |
| 760 | ··-·reboot_required | 764 | ··-·reboot_required |
| 761 | ··-·restrict_strategy | 765 | ··-·restrict_strategy |
| 762 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 763 | [customizations] | ||
| 764 | fips·=·true | ||
| 765 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 766 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 766 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 767 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 767 | ····*·GnuTLS·library | 768 | ····*·GnuTLS·library |
| Max diff block lines reached; 228908/235948 bytes (97.02%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037f40:·3 | 00037f40:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 16537, 235 lines modified | Offset 16537, 235 lines modified | ||
| 00040980:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040980:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040990:·3d22·2369·646d·3732·3530·2220·7461·6269··="#idm7250"·tabi | 00040990:·3d22·2369·646d·3732·3530·2220·7461·6269··="#idm7250"·tabi | ||
| 000409a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 000409a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 000409b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 000409b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 000409c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 000409c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 000409d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 000409d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 000409e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 000409e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 000409f0:·223e·5265·6d65·6469·6174·696f·6e20· | 000409f0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00040a00:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00040a10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040a20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040a30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040a40:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040a00:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00040a10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040a20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040a30:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | |||
| 00040a40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040a50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040a60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040a70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040a80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040a90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040aa0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040ab0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00040ac0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040ad0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00040ae0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00040af0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00040b00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00040b10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00040b20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00040b30:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 00040b40:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 00040b50:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00040b60:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00040b70:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00040b80:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00040b90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00040ba0:·3d22·2369·646d·3732·3531·2220·7461·6269··="#idm7251"·tabi | |||
| 00040bb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00040bc0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00040bd0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00040be0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00040bf0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00040c00:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 00040c10:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 00040c20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040c30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040c40:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00040c50:·646d·3732·3531·223e·3c74·6162·6c65·2063··dm7251"><table·c | |||
| 00040c60:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040c70:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040c80:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040c90:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040ca0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040cb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040cc0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00040cd0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00040ce0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00040cf0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00040d00:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00040d10:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00040d20:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00040d30:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00040 | 00040a50:·3235·3022·3e3c·7072·653e·3c63·6f64·653e··250"><pre><code> | ||
| 00040a60:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00040a70:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 00040a80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00040d50:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 00040d60:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 00040d70:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 00040d80:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 00040d90:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 00040da0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 00040db0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 00040dc0:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 00040dd0:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 00040de0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 00040df0:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 00040e00:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 00040e10:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 00040e20:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 00040e30:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 00040e40:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 00040e50:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 00040 | 00040a90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 00040 | 00040aa0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 00040 | 00040ab0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 00040 | 00040ac0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 00040 | 00040ad0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00040 | 00040ae0:·3732·3531·2220·7461·6269·6e64·6578·3d22··7251"·tabindex=" | ||
| 00040 | 00040af0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00040 | 00040b00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00040 | 00040b10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00040 | 00040b20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00040 | 00040b30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00040b40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 00040f10:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00040f20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040f30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040f40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040f50:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040f60:·3235·3222·3e3c·7461·626c·6520·636c·6173··252"><table·clas | |||
| 00040f70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00040f80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00040f90:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00040fa0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00040fb0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00040fc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| Max diff block lines reached; 2479333/2511679 bytes (98.71%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 47 | ··············Secret | 47 | ··············Secret |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 430, 21 lines modified | Offset 430, 19 lines modified | ||
| 430 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 430 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 431 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 431 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 433 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 433 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 434 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 434 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 435 | ·············_\x8c_\x8i_\x8s············6.1.1 | 435 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 436 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 436 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 442 | package | 438 | [[packages]] |
| 439 | name·=·"aide" | ||
| 440 | version·=·"*" | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 448 | #·Remediation·is·applicable·only·in·certain·platforms | 446 | #·Remediation·is·applicable·only·in·certain·platforms |
| 449 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 447 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 474, 38 lines modified | Offset 472, 40 lines modified | ||
| 474 | ··-·PCI-DSSv4-11.5.2 | 472 | ··-·PCI-DSSv4-11.5.2 |
| 475 | ··-·enable_strategy | 473 | ··-·enable_strategy |
| 476 | ··-·low_complexity | 474 | ··-·low_complexity |
| 477 | ··-·low_disruption | 475 | ··-·low_disruption |
| 478 | ··-·medium_severity | 476 | ··-·medium_severity |
| 479 | ··-·no_reboot_needed | 477 | ··-·no_reboot_needed |
| 480 | ··-·package_aide_installed | 478 | ··-·package_aide_installed |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 486 | package·--add=aide | ||
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 488 | [[packages]] | ||
| 489 | name·=·"aide" | ||
| 490 | version·=·"*" | ||
| 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 480 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 481 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 482 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 483 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 496 | include·install_aide | 484 | include·install_aide |
| 497 | class·install_aide·{ | 485 | class·install_aide·{ |
| 498 | ··package·{·'aide': | 486 | ··package·{·'aide': |
| 499 | ····ensure·=>·'installed', | 487 | ····ensure·=>·'installed', |
| 500 | ··} | 488 | ··} |
| 501 | } | 489 | } |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 492 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 493 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 494 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 495 | package·install·aide | ||
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 501 | package·--add=aide | ||
| 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Identifiers:·CCE-86982-6 | 622 | Identifiers:·CCE-86982-6 |
| 623 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ·············_\x8i_\x8s_\x8m······1446 | 624 | ·············_\x8i_\x8s_\x8m······1446 |
| 625 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 630 | #·Remediation·is·applicable·only·in·certain·platforms | 633 | #·Remediation·is·applicable·only·in·certain·platforms |
| 631 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 634 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 632 | var_system_crypto_policy='FIPS' | 635 | var_system_crypto_policy='FIPS' |
| Offset 756, 18 lines modified | Offset 760, 14 lines modified | ||
| 756 | ··-·NIST-800-53-SC-13 | 760 | ··-·NIST-800-53-SC-13 |
| 757 | ··-·enable_fips_mode | 761 | ··-·enable_fips_mode |
| 758 | ··-·high_severity | 762 | ··-·high_severity |
| 759 | ··-·medium_complexity | 763 | ··-·medium_complexity |
| 760 | ··-·medium_disruption | 764 | ··-·medium_disruption |
| 761 | ··-·reboot_required | 765 | ··-·reboot_required |
| 762 | ··-·restrict_strategy | 766 | ··-·restrict_strategy |
| 763 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 764 | [customizations] | ||
| 765 | fips·=·true | ||
| 766 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 767 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 767 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 768 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 768 | ····*·GnuTLS·library | 769 | ····*·GnuTLS·library |
| Max diff block lines reached; 228908/235957 bytes (97.01%) of diff not shown. | |||
| Offset 14315, 15 lines modified | Offset 14315, 15 lines modified | ||
| 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037f10:·3032·3 | 00037f10:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16535, 235 lines modified | Offset 16535, 235 lines modified | ||
| 00040960:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 00040960:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 00040970:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 00040970:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 00040980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00040980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00040990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00040990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000409a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000409a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000409b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000409b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000409c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000409c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000409d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 000409e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 000409d0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 000409e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000409f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00040a00:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00040a10:·2269·646d·3732·3530·223e·3c74·6162·6c65··"idm7250"><table | |||
| 00040a20:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00040a30:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040a40:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040a50:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040a60:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040a70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040a80:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040a90:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040aa0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040ab0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040ac0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00040ad0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00040ae0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00040af0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00040b00:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00040b10:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 00040b20:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 00040b30:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040b40:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040b50:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040b60:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040b70:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 00040b80:·3531·2220·7461·6269·6e64·6578·3d22·3022··51"·tabindex="0" | |||
| 00040b90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040ba0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040bb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040bc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040bd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040be0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00040bf0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00040c00:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00040c10:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00040c20:·6522·2069·643d·2269·646d·3732·3531·223e··e"·id="idm7251"> | |||
| 00040c30:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00040c40:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00040c50:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00040c60:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00040c70:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00040c80:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040c90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040ca0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040cb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040cc0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00040cd0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00040ce0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00040cf0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00040d00:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00040d10:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00040d20:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 00040d30:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 00040d40:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00040d50:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00040d60:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 00040d70:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 00040d80:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 00040d90:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 00040da0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 00040db0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 00040dc0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 00040dd0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 00040de0:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 00040df0:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 00040e00:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 00040e10:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 00040e20:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 00040e30:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 00040e40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040e50:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040e60:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040e70:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040e80:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 00040e90:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040ea0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040eb0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040ec0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040ed0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040ee0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040ef0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00040 | 000409f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00040 | 00040a00:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00040 | 00040a10:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00040 | 00040a20:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | ||
| 00040f40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040f50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040f60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040f70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040f80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040f90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00040fa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040 | 00040a30:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 00040a40:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 00040a50:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 00040a60:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00040a70:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040a80:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040a90:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040aa0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| Max diff block lines reached; 2477884/2510092 bytes (98.72%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Top·Secret | 46 | ··············Top·Secret |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 429, 21 lines modified | Offset 429, 19 lines modified | ||
| 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 434 | ·············_\x8c_\x8i_\x8s············6.1.1 | 434 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 441 | package | 437 | [[packages]] |
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 447 | #·Remediation·is·applicable·only·in·certain·platforms | 445 | #·Remediation·is·applicable·only·in·certain·platforms |
| 448 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 446 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 473, 38 lines modified | Offset 471, 40 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 471 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·enable_strategy | 472 | ··-·enable_strategy |
| 475 | ··-·low_complexity | 473 | ··-·low_complexity |
| 476 | ··-·low_disruption | 474 | ··-·low_disruption |
| 477 | ··-·medium_severity | 475 | ··-·medium_severity |
| 478 | ··-·no_reboot_needed | 476 | ··-·no_reboot_needed |
| 479 | ··-·package_aide_installed | 477 | ··-·package_aide_installed |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 485 | package·--add=aide | ||
| 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 487 | [[packages]] | ||
| 488 | name·=·"aide" | ||
| 489 | version·=·"*" | ||
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 491 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 492 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 493 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 494 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 495 | include·install_aide | 483 | include·install_aide |
| 496 | class·install_aide·{ | 484 | class·install_aide·{ |
| 497 | ··package·{·'aide': | 485 | ··package·{·'aide': |
| 498 | ····ensure·=>·'installed', | 486 | ····ensure·=>·'installed', |
| 499 | ··} | 487 | ··} |
| 500 | } | 488 | } |
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 494 | package·install·aide | ||
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 500 | package·--add=aide | ||
| 501 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 501 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 502 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 502 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 503 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 503 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 504 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 504 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 621, 14 lines modified | Offset 621, 18 lines modified | ||
| 621 | Identifiers:·CCE-86982-6 | 621 | Identifiers:·CCE-86982-6 |
| 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 623 | ·············_\x8i_\x8s_\x8m······1446 | 623 | ·············_\x8i_\x8s_\x8m······1446 |
| 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 629 | [customizations] | ||
| 630 | fips·=·true | ||
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 629 | #·Remediation·is·applicable·only·in·certain·platforms | 632 | #·Remediation·is·applicable·only·in·certain·platforms |
| 630 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 633 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 631 | var_system_crypto_policy='FIPS' | 634 | var_system_crypto_policy='FIPS' |
| Offset 755, 18 lines modified | Offset 759, 14 lines modified | ||
| 755 | ··-·NIST-800-53-SC-13 | 759 | ··-·NIST-800-53-SC-13 |
| 756 | ··-·enable_fips_mode | 760 | ··-·enable_fips_mode |
| 757 | ··-·high_severity | 761 | ··-·high_severity |
| 758 | ··-·medium_complexity | 762 | ··-·medium_complexity |
| 759 | ··-·medium_disruption | 763 | ··-·medium_disruption |
| 760 | ··-·reboot_required | 764 | ··-·reboot_required |
| 761 | ··-·restrict_strategy | 765 | ··-·restrict_strategy |
| 762 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 763 | [customizations] | ||
| 764 | fips·=·true | ||
| 765 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 766 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 766 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 767 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 767 | ····*·GnuTLS·library | 768 | ····*·GnuTLS·library |
| Max diff block lines reached; 228908/235965 bytes (97.01%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e90:·6f66·2032·3032·3 | 00037e90:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16516, 235 lines modified | Offset 16516, 235 lines modified | ||
| 00040830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00040830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00040840:·6d37·3235·3022·2074·6162·696e·6465·783d··m7250"·tabindex= | 00040840:·6d37·3235·3022·2074·6162·696e·6465·783d··m7250"·tabindex= | ||
| 00040850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00040850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00040860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00040860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00040870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00040870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00040880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00040880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00040890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00040890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 000408a0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 000408b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000408c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000408d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000408e0:·6964·3d22·6964·6d37·3235·3022·3e3c·7461··id="idm7250"><ta | |||
| 000408f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040900:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040910:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040920:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040930:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040940:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00040950:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040960:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00040970:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040980:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00040990:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000409a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000409b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 000409c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 000409d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 000409e0:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 000409f0:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 00040a00:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040a10:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040a20:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040a30:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040a40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040a50:·6d37·3235·3122·2074·6162·696e·6465·783d··m7251"·tabindex= | |||
| 00040a60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040a70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040a80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040a90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040aa0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040 | 000408a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 000408b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 00040ac0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 00040ad0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040ae0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040af0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 00040b00:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 00040b10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040b20:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040b30:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040b40:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040b50:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040b60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040b70:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040b80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040b90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040ba0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040bb0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040bc0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040bd0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040be0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040bf0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 00040c00:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 00040c10:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 00040c20:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 00040c30:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 00040c40:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 00040c50:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 00040c60:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 00040c70:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 00040c80:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 00040c90:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 00040ca0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 00040cb0:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 00040cc0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 00040cd0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 00040ce0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 00040cf0:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 00040d00:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 00040d10:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040d20:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040d30:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040d40:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040d50:·6172·6765·743d·2223·6964·6d37·3235·3222··arget="#idm7252" | |||
| 00040d60:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040d70:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040d80:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00040d90:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00040da0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00040db0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040dc0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00040 | 000408c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00040 | 000408d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00040 | 000408e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00040 | 000408f0:·6522·2069·643d·2269·646d·3732·3530·223e··e"·id="idm7250"> | ||
| 00040900:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 00040910:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00040920:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 00040930:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 00040940:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040950:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040e10:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00040e20:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00040e30:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00040e40:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00040e50:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00040e60:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040e70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040e80:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040e90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040ea0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| Max diff block lines reached; 2505588/2537796 bytes (98.73%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise |
| 45 | ··············Linux·10 | 45 | ··············Linux·10 |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:10 | 48 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 426, 21 lines modified | Offset 426, 19 lines modified | ||
| 426 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 426 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 427 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 427 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 428 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 428 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 429 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 429 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 430 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 430 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 431 | ·············_\x8c_\x8i_\x8s············6.1.1 | 431 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 438 | package | 434 | [[packages]] |
| 435 | name·=·"aide" | ||
| 436 | version·=·"*" | ||
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 444 | #·Remediation·is·applicable·only·in·certain·platforms | 442 | #·Remediation·is·applicable·only·in·certain·platforms |
| 445 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 443 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 470, 38 lines modified | Offset 468, 40 lines modified | ||
| 470 | ··-·PCI-DSSv4-11.5.2 | 468 | ··-·PCI-DSSv4-11.5.2 |
| 471 | ··-·enable_strategy | 469 | ··-·enable_strategy |
| 472 | ··-·low_complexity | 470 | ··-·low_complexity |
| 473 | ··-·low_disruption | 471 | ··-·low_disruption |
| 474 | ··-·medium_severity | 472 | ··-·medium_severity |
| 475 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 476 | ··-·package_aide_installed | 474 | ··-·package_aide_installed |
| 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 482 | package·--add=aide | ||
| 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 484 | [[packages]] | ||
| 485 | name·=·"aide" | ||
| 486 | version·=·"*" | ||
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 492 | include·install_aide | 480 | include·install_aide |
| 493 | class·install_aide·{ | 481 | class·install_aide·{ |
| 494 | ··package·{·'aide': | 482 | ··package·{·'aide': |
| 495 | ····ensure·=>·'installed', | 483 | ····ensure·=>·'installed', |
| 496 | ··} | 484 | ··} |
| 497 | } | 485 | } |
| 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 491 | package·install·aide | ||
| 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 497 | package·--add=aide | ||
| 498 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 498 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 499 | Run·the·following·command·to·generate·a·new·database: | 499 | Run·the·following·command·to·generate·a·new·database: |
| 500 | $·sudo·/usr/sbin/aide·--init | 500 | $·sudo·/usr/sbin/aide·--init |
| 501 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 501 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 502 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 502 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 503 | To·initiate·a·manual·check,·run·the·following·command: | 503 | To·initiate·a·manual·check,·run·the·following·command: |
| 504 | $·sudo·/usr/sbin/aide·--check | 504 | $·sudo·/usr/sbin/aide·--check |
| Offset 819, 39 lines modified | Offset 819, 14 lines modified | ||
| 819 | » echo·"to·see·what·package·to·(re)install"·>&2 | 819 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 820 | » false··#·end·with·an·error·code | 820 | » false··#·end·with·an·error·code |
| 821 | elif·test·"$rc"·!=·0;·then | 821 | elif·test·"$rc"·!=·0;·then |
| 822 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 822 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 823 | » false··#·end·with·an·error·code | 823 | » false··#·end·with·an·error·code |
| 824 | fi | 824 | fi |
| 825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 826 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 827 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 828 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 829 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 830 | --- | ||
| 831 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 832 | kind:·MachineConfig | ||
| 833 | spec: | ||
| 834 | ··config: | ||
| 835 | ····ignition: | ||
| 836 | ······version:·3.1.0 | ||
| 837 | ····systemd: | ||
| 838 | ······units: | ||
| 839 | ········-·name:·configure-crypto-policy.service | ||
| 840 | ··········enabled:·true | ||
| 841 | ··········contents:·| | ||
| 842 | ············[Unit] | ||
| 843 | ············Before=kubelet.service | ||
| 844 | ············[Service] | ||
| 845 | ············Type=oneshot | ||
| 846 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 847 | ············RemainAfterExit=yes | ||
| 848 | ············[Install] | ||
| 849 | ············WantedBy=multi-user.target | ||
| 850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 227443/233125 bytes (97.56%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037e50:·3 | 00037e50:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15130, 234 lines modified | Offset 15130, 234 lines modified | ||
| 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | ||
| 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b200:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b210:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b220:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b230:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b240:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b250:·6964·6d37·3235·3022·3e3c·7072·653e·3c63··idm7250"><pre><c | |||
| 0003b260:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b270:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b280:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b290:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b2a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b2b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b2c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b2d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b2e0:·2369·646d·3732·3531·2220·7461·6269·6e64··#idm7251"·tabind | |||
| 0003b2f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b300:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b310:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b320:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b330:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b340:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b | 0003b350:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b | 0003b360:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b370:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b380:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b390:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | ||
| 0003b | 0003b3a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b3b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b3c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b3d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b3e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b3f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b400:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b410:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b420:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b430:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b | 0003b440:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b | 0003b450:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b | 0003b460:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b | 0003b470:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b | 0003b480:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0003b340:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 0003b350:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003b360:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b370:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b380:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b390:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b3a0:·7267·6574·3d22·2369·646d·3732·3531·2220··rget="#idm7251"· | |||
| 0003b3b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b3c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b3d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b3e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b3f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b400:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b410:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b420:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b430:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b440:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b450:·643d·2269·646d·3732·3531·223e·3c74·6162··d="idm7251"><tab | |||
| 0003b460:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b470:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b480:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b490:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b4a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b4b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b4c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b4d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b4e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b500:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b510:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b520:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b530:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b540:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b550:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b560:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b570:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b580:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b590:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b5a0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b5b0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b5c0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b5d0:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003b5e0:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003b5f0:·6e0a·2020·2020·646e·6620·696e·7374·616c··n.····dnf·instal | |||
| 0003b600:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003b610:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b620:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b630:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b640:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b650:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b660:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b670:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b680:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b690:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b6a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b6b0:·2369·646d·3732·3532·2220·7461·6269·6e64··#idm7252"·tabind | |||
| 0003b6c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b6d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b6e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b6f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b700:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b490:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| Max diff block lines reached; 4079523/4111731 bytes (99.22%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:10 | 45 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 21 lines modified | Offset 105, 19 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package | 113 | [[packages]] |
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | 121 | #·Remediation·is·applicable·only·in·certain·platforms |
| 124 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 122 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 149, 38 lines modified | Offset 147, 40 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 149 | ··-·low_complexity |
| 152 | ··-·low_disruption | 150 | ··-·low_disruption |
| 153 | ··-·medium_severity | 151 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | include·install_aide | 159 | include·install_aide |
| 172 | class·install_aide·{ | 160 | class·install_aide·{ |
| 173 | ··package·{·'aide': | 161 | ··package·{·'aide': |
| 174 | ····ensure·=>·'installed', | 162 | ····ensure·=>·'installed', |
| 175 | ··} | 163 | ··} |
| 176 | } | 164 | } |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·install·aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 178 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 179 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 179 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 180 | Severity: ···medium | 180 | Severity: ···medium |
| 181 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 181 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 182 | Identifiers:·CCE-86441-3 | 182 | Identifiers:·CCE-86441-3 |
| 183 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 183 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| Offset 1725, 14 lines modified | Offset 1725, 18 lines modified | ||
| 1725 | Identifiers:·CCE-86982-6 | 1725 | Identifiers:·CCE-86982-6 |
| 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1727 | ·············_\x8i_\x8s_\x8m······1446 | 1727 | ·············_\x8i_\x8s_\x8m······1446 |
| 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1733 | [customizations] | ||
| 1734 | fips·=·true | ||
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1733 | #·Remediation·is·applicable·only·in·certain·platforms | 1736 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1734 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1737 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1735 | var_system_crypto_policy='FIPS' | 1738 | var_system_crypto_policy='FIPS' |
| Offset 1859, 18 lines modified | Offset 1863, 14 lines modified | ||
| 1859 | ··-·NIST-800-53-SC-13 | 1863 | ··-·NIST-800-53-SC-13 |
| 1860 | ··-·enable_fips_mode | 1864 | ··-·enable_fips_mode |
| 1861 | ··-·high_severity | 1865 | ··-·high_severity |
| 1862 | ··-·medium_complexity | 1866 | ··-·medium_complexity |
| 1863 | ··-·medium_disruption | 1867 | ··-·medium_disruption |
| 1864 | ··-·reboot_required | 1868 | ··-·reboot_required |
| 1865 | ··-·restrict_strategy | 1869 | ··-·restrict_strategy |
| 1866 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1867 | [customizations] | ||
| 1868 | fips·=·true | ||
| 1869 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1870 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1870 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1871 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1871 | fips-mode-setup·--enable | 1872 | fips-mode-setup·--enable |
| Max diff block lines reached; 463605/470821 bytes (98.47%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037e50:·3 | 00037e50:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15130, 235 lines modified | Offset 15130, 235 lines modified | ||
| 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b200:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b210:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b220:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b230:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b240:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b250:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | |||
| 0003b260:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b270:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b280:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b290:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b2a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b2c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b2d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b2e0:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b2f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b300:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b310:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b320:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b330:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b340:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b350:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b | 0003b360:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b370:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b380:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b390:·2269·646d·3732·3531·223e·3c74·6162·6c65··"idm7251"><table | ||
| 0003b | 0003b3a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b3b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b3c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b3d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b3e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b3f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b400:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b410:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b420:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b430:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b440:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b450:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b460:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b | 0003b470:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b | 0003b480:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b340:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003b350:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003b360:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b370:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b380:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b390:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b3a0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b3b0:·3531·2220·7461·6269·6e64·6578·3d22·3022··51"·tabindex="0" | |||
| 0003b3c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b3d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b3e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b3f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b400:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b410:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b420:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b430:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b440:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b450:·6522·2069·643d·2269·646d·3732·3531·223e··e"·id="idm7251"> | |||
| 0003b460:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b470:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b480:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b490:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b4a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b4b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b4c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b4d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b4e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b4f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b500:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b510:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b520:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b530:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b540:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b550:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b560:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b570:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b580:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b590:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b5a0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b5b0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b5c0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b5d0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b5e0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b5f0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003b600:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b610:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b620:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b630:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b640:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b650:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b660:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b670:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b680:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b690:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b6a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b6b0:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 0003b6c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b6d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b6e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b6f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b700:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b | 0003b490:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| Max diff block lines reached; 4029714/4062060 bytes (99.20%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:10 | 45 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 21 lines modified | Offset 105, 19 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package | 113 | [[packages]] |
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | 121 | #·Remediation·is·applicable·only·in·certain·platforms |
| 124 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 122 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 149, 38 lines modified | Offset 147, 40 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 149 | ··-·low_complexity |
| 152 | ··-·low_disruption | 150 | ··-·low_disruption |
| 153 | ··-·medium_severity | 151 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | include·install_aide | 159 | include·install_aide |
| 172 | class·install_aide·{ | 160 | class·install_aide·{ |
| 173 | ··package·{·'aide': | 161 | ··package·{·'aide': |
| 174 | ····ensure·=>·'installed', | 162 | ····ensure·=>·'installed', |
| 175 | ··} | 163 | ··} |
| 176 | } | 164 | } |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·install·aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 178 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 179 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 179 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 180 | Severity: ···medium | 180 | Severity: ···medium |
| 181 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 181 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 182 | Identifiers:·CCE-86441-3 | 182 | Identifiers:·CCE-86441-3 |
| 183 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 183 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| Offset 1725, 14 lines modified | Offset 1725, 18 lines modified | ||
| 1725 | Identifiers:·CCE-86982-6 | 1725 | Identifiers:·CCE-86982-6 |
| 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1727 | ·············_\x8i_\x8s_\x8m······1446 | 1727 | ·············_\x8i_\x8s_\x8m······1446 |
| 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1733 | [customizations] | ||
| 1734 | fips·=·true | ||
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1733 | #·Remediation·is·applicable·only·in·certain·platforms | 1736 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1734 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1737 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1735 | var_system_crypto_policy='FIPS' | 1738 | var_system_crypto_policy='FIPS' |
| Offset 1859, 18 lines modified | Offset 1863, 14 lines modified | ||
| 1859 | ··-·NIST-800-53-SC-13 | 1863 | ··-·NIST-800-53-SC-13 |
| 1860 | ··-·enable_fips_mode | 1864 | ··-·enable_fips_mode |
| 1861 | ··-·high_severity | 1865 | ··-·high_severity |
| 1862 | ··-·medium_complexity | 1866 | ··-·medium_complexity |
| 1863 | ··-·medium_disruption | 1867 | ··-·medium_disruption |
| 1864 | ··-·reboot_required | 1868 | ··-·reboot_required |
| 1865 | ··-·restrict_strategy | 1869 | ··-·restrict_strategy |
| 1866 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1867 | [customizations] | ||
| 1868 | fips·=·true | ||
| 1869 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1870 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1870 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1871 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1871 | fips-mode-setup·--enable | 1872 | fips-mode-setup·--enable |
| Max diff block lines reached; 458022/465242 bytes (98.45%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038790:·7320·6f66·2032·3032·3 | 00038790:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15247, 237 lines modified | Offset 15247, 237 lines modified | ||
| 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | ||
| 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b950:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b950:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b960:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b960:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b970:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b980:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b990:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003b9a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b9b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b9c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b9d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b9e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b9f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ba00:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ba10:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ba20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba30:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ba40:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003ba50:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003ba60:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ba70:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ba80:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ba90:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003baa0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003bab0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bac0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bad0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bae0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003baf0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bb00:·2223·6964·6d37·3938·3122·2074·6162·696e··"#idm7981"·tabin | |||
| 0003bb10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bb20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bb30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bb40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bb50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bb60:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003bb70:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003bb80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bb90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bba0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bbb0:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | |||
| 0003bbc0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bbd0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bbe0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bbf0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bc00:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bc10:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bc20:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003bc30:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003bc40:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bc50:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bc60:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bc70:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bc80:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bc90:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bca0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003bcb0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003bcc0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003bcd0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003bce0:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003bcf0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003bd00:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003bd10:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003bd20:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003bd30:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003bd40:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003bd50:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 0003bd60:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003bd70:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003bd80:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003bd90:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003bda0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003bdb0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003bdc0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bdd0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bde0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bdf0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003be00:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003be10:·3938·3222·2074·6162·696e·6465·783d·2230··982"·tabindex="0 | |||
| 0003be20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003be30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003be40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003be50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003be60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003be70:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b | 0003b970:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b | 0003b980:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b990:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b9a0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | ||
| 0003bec0:·3832·223e·3c74·6162·6c65·2063·6c61·7373··82"><table·class | |||
| 0003bed0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b | 0003b9b0:·3830·223e·3c70·7265·3e3c·636f·6465·3e0a··80"><pre><code>. | ||
| 0003b9c0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b9d0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b9e0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b9f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ba00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ba10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ba20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ba30:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003ba40:·3938·3122·2074·6162·696e·6465·783d·2230··981"·tabindex="0 | |||
| 0003ba50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ba60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ba70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ba80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| Max diff block lines reached; 2759593/2792077 bytes (98.84%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 115, 21 lines modified | Offset 115, 19 lines modified | ||
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8c_\x8i_\x8s············5.3.1 | 119 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package | 123 | [[packages]] |
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 134 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 132 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 160, 38 lines modified | Offset 158, 40 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 160 | ··-·low_complexity |
| 163 | ··-·low_disruption | 161 | ··-·low_disruption |
| 164 | ··-·medium_severity | 162 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·--add=aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | include·install_aide | 170 | include·install_aide |
| 183 | class·install_aide·{ | 171 | class·install_aide·{ |
| 184 | ··package·{·'aide': | 172 | ··package·{·'aide': |
| 185 | ····ensure·=>·'installed', | 173 | ····ensure·=>·'installed', |
| 186 | ··} | 174 | ··} |
| 187 | } | 175 | } |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·--add=aide | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 189 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/sbin/aide·--init | 190 | $·sudo·/usr/sbin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 193 | To·initiate·a·manual·check,·run·the·following·command: | 193 | To·initiate·a·manual·check,·run·the·following·command: |
| 194 | $·sudo·/usr/sbin/aide·--check | 194 | $·sudo·/usr/sbin/aide·--check |
| Offset 322, 26 lines modified | Offset 322, 26 lines modified | ||
| 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 323 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. | 323 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. |
| 324 | Rationale:···The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. | 324 | Rationale:···The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. |
| 325 | Severity: ···medium | 325 | Severity: ···medium |
| 326 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_boot | 326 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_boot |
| 327 | Identifiers:·CCE-83336-8 | 327 | Identifiers:·CCE-83336-8 |
| 328 | References:··_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 328 | References:··_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [[customizations.filesystem]] | ||
| 331 | mountpoint·=·"/boot" | ||
| 332 | size·=·1073741824 | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 334 | part·/boot | 338 | part·/boot |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 336 | [[customizations.filesystem]] | ||
| 337 | mountpoint·=·"/boot" | ||
| 338 | size·=·1073741824 | ||
| 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 340 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 340 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 341 | Rationale:···Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 341 | Rationale:···Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 342 | Severity: ···low | 342 | Severity: ···low |
| 343 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_home | 343 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_home |
| 344 | Identifiers:·CCE-81044-0 | 344 | Identifiers:·CCE-81044-0 |
| 345 | ·············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 | 345 | ·············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 |
| Offset 352, 95 lines modified | Offset 352, 95 lines modified | ||
| 352 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 352 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| Max diff block lines reached; 222015/228841 bytes (97.02%) of diff not shown. | |||
| Offset 14450, 15 lines modified | Offset 14450, 15 lines modified | ||
| 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038780:·7320·6f66·2032·3032·3 | 00038780:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15253, 236 lines modified | Offset 15253, 236 lines modified | ||
| 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | ||
| 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b9b0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b9b0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b9c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b9d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b9e0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003b9f0:·3830·223e·3c74·6162·6c65·2063·6c61·7373··80"><table·class | |||
| 0003ba00:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ba10:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ba20:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ba30:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ba40:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ba50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ba70:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ba80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba90:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003baa0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bab0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bac0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bad0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bae0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003baf0:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003bb00:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003bb10:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bb20:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bb30:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bb40:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bb50:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 0003bb60:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bb70:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bb80:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bb90:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bba0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bbb0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bbc0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003bbd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bbe0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bbf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bc00:·2269·646d·3739·3831·223e·3c74·6162·6c65··"idm7981"><table | |||
| 0003bc10:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bc20:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bc30:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bc40:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bc50:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bc60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bc70:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bc80:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bc90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bca0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bcb0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bcc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bcd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bce0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bcf0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bd00:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003bd10:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003bd20:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003bd30:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003bd40:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003bd50:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003bd60:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003bd70:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003bd80:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003bd90:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003bda0:·2020·2020·7975·6d20·696e·7374·616c·6c20······yum·install· | |||
| 0003bdb0:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003bdc0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003bdd0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003bde0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003bdf0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003be00:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003be10:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003be20:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003be30:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003be40:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003be50:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003be60:·646d·3739·3832·2220·7461·6269·6e64·6578··dm7982"·tabindex | |||
| 0003be70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003be80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003be90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bea0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003beb0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bec0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b | 0003b9c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b | 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bf10:·6d37·3938·3222·3e3c·7461·626c·6520·636c··m7982"><table·cl | |||
| 0003bf20:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b | 0003ba00:·6d37·3938·3022·3e3c·7072·653e·3c63·6f64··m7980"><pre><cod | ||
| 0003ba10:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003ba20:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003ba30:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003ba40:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ba50:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba60:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ba70:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ba80:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ba90:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003baa0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bab0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bac0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bad0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bae0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| Max diff block lines reached; 2854507/2886853 bytes (98.88%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 116, 21 lines modified | Offset 116, 19 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package | 124 | [[packages]] |
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 161, 38 lines modified | Offset 159, 40 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 161 | ··-·low_complexity |
| 164 | ··-·low_disruption | 162 | ··-·low_disruption |
| 165 | ··-·medium_severity | 163 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | include·install_aide | 171 | include·install_aide |
| 184 | class·install_aide·{ | 172 | class·install_aide·{ |
| 185 | ··package·{·'aide': | 173 | ··package·{·'aide': |
| 186 | ····ensure·=>·'installed', | 174 | ····ensure·=>·'installed', |
| 187 | ··} | 175 | ··} |
| 188 | } | 176 | } |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·install·aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 194 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 195 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 820, 26 lines modified | Offset 820, 26 lines modified | ||
| 820 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 820 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/b\x8bo\x8oo\x8ot\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 821 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. | 821 | It·is·recommended·that·the·/boot·directory·resides·on·a·separate·partition.·This·makes·it·easier·to·apply·restrictions·e.g.·through·the·noexec·mount·option.·Eventually,·the·/boot·partition·can·be·configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. |
| 822 | Rationale:···The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. | 822 | Rationale:···The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition·should·be·restricted. |
| 823 | Severity: ···medium | 823 | Severity: ···medium |
| 824 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_boot | 824 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_boot |
| 825 | Identifiers:·CCE-83336-8 | 825 | Identifiers:·CCE-83336-8 |
| 826 | References:··_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 826 | References:··_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 828 | [[customizations.filesystem]] | ||
| 829 | mountpoint·=·"/boot" | ||
| 830 | size·=·1073741824 | ||
| 827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 828 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 829 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 830 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 831 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 832 | part·/boot | 836 | part·/boot |
| 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 834 | [[customizations.filesystem]] | ||
| 835 | mountpoint·=·"/boot" | ||
| 836 | size·=·1073741824 | ||
| 837 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 837 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 838 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 838 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at·installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 839 | Rationale:···Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 839 | Rationale:···Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 840 | Severity: ···low | 840 | Severity: ···low |
| 841 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_home | 841 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_home |
| 842 | Identifiers:·CCE-81044-0 | 842 | Identifiers:·CCE-81044-0 |
| 843 | ·············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 | 843 | ·············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········12,·15,·8 |
| Offset 850, 95 lines modified | Offset 850, 95 lines modified | ||
| 850 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 850 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| Max diff block lines reached; 230409/237190 bytes (97.14%) of diff not shown. | |||
| Offset 14452, 15 lines modified | Offset 14452, 15 lines modified | ||
| 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000387a0:·7320·6f66·2032·3032·3 | 000387a0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15243, 237 lines modified | Offset 15243, 237 lines modified | ||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b910:·6d65·6469·6174·696f·6e20· | 0003b910:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b920:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b930:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b940:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b950:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b960:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003b920:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b930:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b940:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b950:·2069·643d·2269·646d·3739·3830·223e·3c74···id="idm7980"><t | |||
| 0003b960:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b970:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b980:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b990:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b9a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b9b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b9c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b9d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b9e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b9f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ba00:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003ba10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba20:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ba30:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ba40:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ba50:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 0003ba60:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003ba70:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ba80:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba90:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003baa0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bab0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bac0:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003bad0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bae0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003baf0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bb00:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bb10:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bb20:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003bb30:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003bb40:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bb50:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bb60:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bb70:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003bb80:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bb90:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bba0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bbb0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bbc0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bbd0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bbe0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bbf0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bc00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bc10:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bc20:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bc30:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bc40:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bc50:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b970:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b980:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b990:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003bc70:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003bc80:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003bc90:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003bca0:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003bcb0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003bcc0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003bcd0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003bce0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003bcf0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003bd00:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 0003bd10:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 0003bd20:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003bd30:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003bd40:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003bd50:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003bd60:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b | 0003b9a0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 0003b | 0003b9b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b9c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b9d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b9e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b9f0:·7461·7267·6574·3d22·2369·646d·3739·3831··target="#idm7981 | ||
| 0003b | 0003ba00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003ba10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003ba20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b | 0003ba30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b | 0003ba40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b | 0003ba50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ba60:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003ba70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ba80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ba90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003baa0:·2069·643d·2269·646d·3739·3831·223e·3c74···id="idm7981"><t | |||
| 0003bab0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bac0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bad0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bae0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003baf0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003be30:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003be40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003be50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003be60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003be70:·7365·2220·6964·3d22·6964·6d37·3938·3222··se"·id="idm7982" | |||
| Max diff block lines reached; 1587394/1619878 bytes (97.99%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 131, 21 lines modified | Offset 131, 19 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package | 139 | [[packages]] |
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 38 lines modified | Offset 174, 40 lines modified | ||
| 176 | ··-·PCI-DSSv4-11.5.2 | 174 | ··-·PCI-DSSv4-11.5.2 |
| 177 | ··-·enable_strategy | 175 | ··-·enable_strategy |
| 178 | ··-·low_complexity | 176 | ··-·low_complexity |
| 179 | ··-·low_disruption | 177 | ··-·low_disruption |
| 180 | ··-·medium_severity | 178 | ··-·medium_severity |
| 181 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 182 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | include·install_aide | 186 | include·install_aide |
| 199 | class·install_aide·{ | 187 | class·install_aide·{ |
| 200 | ··package·{·'aide': | 188 | ··package·{·'aide': |
| 201 | ····ensure·=>·'installed', | 189 | ····ensure·=>·'installed', |
| 202 | ··} | 190 | ··} |
| 203 | } | 191 | } |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·install·aide | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·--add=aide | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 208 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 208 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 209 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 209 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 210 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 358, 26 lines modified | Offset 358, 26 lines modified | ||
| 358 | configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. | 358 | configured·not·to·be·mounted·automatically·with·the·noauto·mount·option. |
| 359 | Rationale:···The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition | 359 | Rationale:···The·/boot·partition·contains·the·kernel·and·bootloader·files.·Access·to·this·partition |
| 360 | ·············should·be·restricted. | 360 | ·············should·be·restricted. |
| 361 | Severity: ···medium | 361 | Severity: ···medium |
| 362 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_boot | 362 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_boot |
| 363 | Identifiers:·CCE-83336-8 | 363 | Identifiers:·CCE-83336-8 |
| 364 | References:··_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 364 | References:··_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 366 | [[customizations.filesystem]] | ||
| 367 | mountpoint·=·"/boot" | ||
| 368 | size·=·1073741824 | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 370 | part·/boot | 374 | part·/boot |
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 372 | [[customizations.filesystem]] | ||
| 373 | mountpoint·=·"/boot" | ||
| 374 | size·=·1073741824 | ||
| 375 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 375 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/h\x8ho\x8om\x8me\x8e·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 376 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at | 376 | If·user·home·directories·will·be·stored·locally,·create·a·separate·partition·for·/home·at |
| 377 | installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such | 377 | installation·time·(or·migrate·it·later·using·LVM).·If·/home·will·be·mounted·from·another·system·such |
| 378 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the | 378 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the |
| 379 | mountpoint·can·instead·be·configured·later. | 379 | mountpoint·can·instead·be·configured·later. |
| 380 | ·············Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more | 380 | ·············Ensuring·that·/home·is·mounted·on·its·own·partition·enables·the·setting·of·more |
| 381 | Rationale:···restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill | 381 | Rationale:···restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill |
| Offset 394, 105 lines modified | Offset 394, 105 lines modified | ||
| 394 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 394 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| Max diff block lines reached; 146706/152850 bytes (95.98%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038790:·2032·3032·3 | 00038790:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14901, 217 lines modified | Offset 14901, 217 lines modified | ||
| 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | ||
| 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003a3b0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003a3b0:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003a3c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a3d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a3e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a3f0:·3133·3338·3922·3e3c·7461·626c·6520·636c··13389"><table·cl | |||
| 0003a400:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a410:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a420:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a430:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a440:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a460:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a470:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003a480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a490:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003a4a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003a4b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a4c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003a4d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003a4e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003a4f0:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003a500:·646e·662d·6175·746f·6d61·7469·630a·3c2f··dnf-automatic.</ | |||
| 0003a510:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003a520:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003a530:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003a540:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003a550:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003a560:·2369·646d·3133·3339·3022·2074·6162·696e··#idm13390"·tabin | |||
| 0003a570:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003a580:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003a590:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003a5a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003a5b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003a5c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003a5d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003a5e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003a5f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003a600:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003a610:·6d31·3333·3930·223e·3c74·6162·6c65·2063··m13390"><table·c | |||
| 0003a620:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003a630:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003a640:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003a650:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003a660:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003a670:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a680:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003a690:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003a6a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003a6b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003a6c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003a6d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a6e0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003a6f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003a700:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003a710:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003a720:·7569·6574·2022·646e·662d·6175·746f·6d61··uiet·"dnf-automa | |||
| 0003a730:·7469·6322·203b·2074·6865·6e0a·2020·2020··tic"·;·then.···· | |||
| 0003a740:·7975·6d20·696e·7374·616c·6c20·2d79·2022··yum·install·-y·" | |||
| 0003a750:·646e·662d·6175·746f·6d61·7469·6322·0a66··dnf-automatic".f | |||
| 0003a760:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003a770:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003a780:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003a790:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003a7a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003a7b0:·6574·3d22·2369·646d·3133·3339·3122·2074··et="#idm13391"·t | |||
| 0003a7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003a7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003a7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003a7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003a800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003a810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a820:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003a830:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a840:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a850:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a860:·2069·643d·2269·646d·3133·3339·3122·3e3c···id="idm13391">< | |||
| 0003a870:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a880:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a890:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a8a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a8b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a8c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a8d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a8e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a8f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a900:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a910:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a920:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a930:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a940:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003a950:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a960:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003a970:·6e73·7572·6520·646e·662d·6175·746f·6d61··nsure·dnf-automa | |||
| 0003a980:·7469·6320·6973·2069·6e73·7461·6c6c·6564··tic·is·installed | |||
| 0003a990:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003a9a0:·6e61·6d65·3a20·646e·662d·6175·746f·6d61··name:·dnf-automa | |||
| 0003a9b0:·7469·630a·2020·2020·7374·6174·653a·2070··tic.····state:·p | |||
| 0003a9c0:·7265·7365·6e74·0a20·2074·6167·733a·0a20··resent.··tags:.· | |||
| 0003a9d0:·202d·2043·4345·2d38·3239·3835·2d33·0a20···-·CCE-82985-3.· | |||
| 0003a9e0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003a9f0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003aa00:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003aa10:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| Max diff block lines reached; 371584/401308 bytes (92.59%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 94, 21 lines modified | Offset 94, 19 lines modified | ||
| 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 106 | package | 102 | [[packages]] |
| 103 | name·=·"dnf-automatic" | ||
| 104 | version·=·"*" | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 110 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 127, 38 lines modified | Offset 125, 40 lines modified | ||
| 127 | ··-·CCE-82985-3 | 125 | ··-·CCE-82985-3 |
| 128 | ··-·enable_strategy | 126 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 127 | ··-·low_complexity |
| 130 | ··-·low_disruption | 128 | ··-·low_disruption |
| 131 | ··-·medium_severity | 129 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 130 | ··-·no_reboot_needed |
| 133 | ··-·package_dnf-automatic_installed | 131 | ··-·package_dnf-automatic_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·--add=dnf-automatic | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"dnf-automatic" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | include·install_dnf-automatic | 137 | include·install_dnf-automatic |
| 150 | class·install_dnf-automatic·{ | 138 | class·install_dnf-automatic·{ |
| 151 | ··package·{·'dnf-automatic': | 139 | ··package·{·'dnf-automatic': |
| 152 | ····ensure·=>·'installed', | 140 | ····ensure·=>·'installed', |
| 153 | ··} | 141 | ··} |
| 154 | } | 142 | } |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·install·dnf-automatic | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=dnf-automatic | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 158 | automatic.conf. | 158 | automatic.conf. |
| 159 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 159 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 160 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 160 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 161 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 161 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9618, 21 lines modified | Offset 9618, 14 lines modified | ||
| 9618 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9618 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9619 | ····························A.9.1.2 | 9619 | ····························A.9.1.2 |
| 9620 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9620 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9621 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9621 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9622 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9622 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9623 | ·············_\x8c_\x8i_\x8s············2.2.3 | 9623 | ·············_\x8c_\x8i_\x8s············2.2.3 |
| 9624 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9624 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9630 | package·remove·dhcp-server | ||
| 9631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9634 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9635 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9636 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server | 9630 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server |
| Offset 9663, 33 lines modified | Offset 9656, 40 lines modified | ||
| 9663 | ··-·PCI-DSSv4-2.2.4 | 9656 | ··-·PCI-DSSv4-2.2.4 |
| 9664 | ··-·disable_strategy | 9657 | ··-·disable_strategy |
| 9665 | ··-·low_complexity | 9658 | ··-·low_complexity |
| 9666 | ··-·low_disruption | 9659 | ··-·low_disruption |
| 9667 | ··-·medium_severity | 9660 | ··-·medium_severity |
| 9668 | ··-·no_reboot_needed | 9661 | ··-·no_reboot_needed |
| 9669 | ··-·package_dhcp_removed | 9662 | ··-·package_dhcp_removed |
| 9670 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9671 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9672 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9673 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 34848/40593 bytes (85.85%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038680:·3230·323 | 00038680:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15293, 237 lines modified | Offset 15293, 237 lines modified | ||
| 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bc30:·6564·6961·7469·6f6e·20 | 0003bc30:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003bc40:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003bc50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bc60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bc80:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc90:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003bca0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003bcb0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bcc0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003bcd0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bce0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bcf0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bd00:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bd10:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003bd20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bd30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bd40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bd50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bd60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd80:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b | 0003bd90:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003bda0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003bdb0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003bdc0:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | ||
| 0003b | 0003bdd0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003bde0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003bdf0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003be00:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003be10:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003be20:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003be30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003be40:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b | 0003be50:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003be60:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003be70:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003be80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003be90:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003bea0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003beb0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003bd70:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003b | 0003bec0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003bed0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003bee0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003bef0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003bf00:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003bf10:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003bf20:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003bf30:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003bf40:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003bf50:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003bf60:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| 0003bf70:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003bf80:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003bf90:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003bfa0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003bfb0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003bfc0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b | 0003bfd0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003bfe0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003bff0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003 | 0003c000:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003 | 0003c010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003 | 0003c020:·2223·6964·6d37·3938·3222·2074·6162·696e··"#idm7982"·tabin | ||
| 0003 | 0003c030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003 | 0003c040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003be10:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003be20:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003be30:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003be40:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003be50:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003be60:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003be70:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003be80:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003be90:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bea0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003beb0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bec0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bed0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003 | 0003c050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c080:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003c090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c0d0:·2269·646d·3739·3832·223e·3c74·6162·6c65··"idm7982"><table | |||
| 0003c0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003 | 0003c160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bf00:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003 | 0003c170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003c180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003c190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003 | 0003c1a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003bf40:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| Max diff block lines reached; 4269917/4302401 bytes (99.24%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 21 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package | 130 | [[packages]] |
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 38 lines modified | Offset 165, 40 lines modified | ||
| 167 | ··-·PCI-DSSv4-11.5.2 | 165 | ··-·PCI-DSSv4-11.5.2 |
| 168 | ··-·enable_strategy | 166 | ··-·enable_strategy |
| 169 | ··-·low_complexity | 167 | ··-·low_complexity |
| 170 | ··-·low_disruption | 168 | ··-·low_disruption |
| 171 | ··-·medium_severity | 169 | ··-·medium_severity |
| 172 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 173 | ··-·package_aide_installed | 171 | ··-·package_aide_installed |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | [[packages]] | ||
| 182 | name·=·"aide" | ||
| 183 | version·=·"*" | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | 177 | include·install_aide |
| 190 | class·install_aide·{ | 178 | class·install_aide·{ |
| 191 | ··package·{·'aide': | 179 | ··package·{·'aide': |
| 192 | ····ensure·=>·'installed', | 180 | ····ensure·=>·'installed', |
| 193 | ··} | 181 | ··} |
| 194 | } | 182 | } |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·install·aide | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 200 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 201 | $·sudo·/usr/sbin/aide·--check |
| Offset 702, 39 lines modified | Offset 702, 14 lines modified | ||
| 702 | » echo·"to·see·what·package·to·(re)install"·>&2 | 702 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 703 | » false··#·end·with·an·error·code | 703 | » false··#·end·with·an·error·code |
| 704 | elif·test·"$rc"·!=·0;·then | 704 | elif·test·"$rc"·!=·0;·then |
| 705 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 705 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 706 | » false··#·end·with·an·error·code | 706 | » false··#·end·with·an·error·code |
| 707 | fi | 707 | fi |
| 708 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 709 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 710 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 711 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 712 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 713 | --- | ||
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 715 | kind:·MachineConfig | ||
| 716 | spec: | ||
| 717 | ··config: | ||
| 718 | ····ignition: | ||
| 719 | ······version:·3.1.0 | ||
| 720 | ····systemd: | ||
| 721 | ······units: | ||
| 722 | ········-·name:·configure-crypto-policy.service | ||
| 723 | ··········enabled:·true | ||
| 724 | ··········contents:·| | ||
| 725 | ············[Unit] | ||
| 726 | ············Before=kubelet.service | ||
| 727 | ············[Service] | ||
| 728 | ············Type=oneshot | ||
| 729 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 730 | ············RemainAfterExit=yes | ||
| 731 | ············[Install] | ||
| 732 | ············WantedBy=multi-user.target | ||
| 733 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 708 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 391930/397487 bytes (98.60%) of diff not shown. | |||
| Offset 14434, 16 lines modified | Offset 14434, 16 lines modified | ||
| 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038680:·2020·2028·6173·206f·6620·3230·323 | 00038680:·2020·2028·6173·206f·6620·3230·3236·2d30·····(as·of·2026-0 | ||
| 00038690:·3 | 00038690:·312d·3238·290a·2020·2020·2020·2020·2020··1-28).·········· | ||
| 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15262, 236 lines modified | Offset 15262, 236 lines modified | ||
| 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | ||
| 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ba40:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003ba50:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ba60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ba70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ba80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ba90:·3d22·6964·6d37·3938·3022·3e3c·7072·653e··="idm7980"><pre> | |||
| 0003baa0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003bab0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003bac0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ba40:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003ba50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ba60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ba70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ba80:·646d·3739·3830·223e·3c74·6162·6c65·2063··dm7980"><table·c | |||
| 0003ba90:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003baa0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bab0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bac0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bad0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bae0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003baf0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bb00:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bb10:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bb20:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bb30:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bb40:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bb50:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bb60:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bb70:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bb80:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003bb90:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003bba0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bbb0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bbc0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bbd0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bbe0:·7461·7267·6574·3d22·2369·646d·3739·3831··target="#idm7981 | |||
| 0003bbf0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bc00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bc10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bc20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bc30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bc40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bc50:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bc60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bc70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bc80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bc90:·2069·643d·2269·646d·3739·3831·223e·3c74···id="idm7981"><t | |||
| 0003bca0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bcb0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bcc0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bcd0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bce0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bcf0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bd00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bd10:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003bd20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bd30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bd40:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bd50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bd60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bd70:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bd80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bd90:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003bda0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003bdb0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003bdc0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003bdd0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003bde0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003bdf0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003be00:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003be10:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003be20:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003be30:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003be40:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003be50:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003be60:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003be70:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003be80:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003be90:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b | 0003bad0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003bae0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003baf0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003bb00:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003bb10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003bb20:·3d22·2369·646d·3739·3831·2220·7461·6269··="#idm7981"·tabi | ||
| 0003b | 0003bb30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003bb40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003bb50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b | 0003bb60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003bb70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b | 0003bb80:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003bb90:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003bba0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bbb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bf60:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003bf70:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bf80:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bf90:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bfa0:·3d22·6964·6d37·3938·3222·3e3c·7461·626c··="idm7982"><tabl | |||
| 0003bfb0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bfc0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bfd0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bfe0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| Max diff block lines reached; 2349292/2381776 bytes (98.64%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 21 lines modified | Offset 117, 19 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package | 125 | [[packages]] |
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 133 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 134 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 38 lines modified | Offset 160, 40 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 162 | ··-·low_complexity |
| 165 | ··-·low_disruption | 163 | ··-·low_disruption |
| 166 | ··-·medium_severity | 164 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·--add=aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | 172 | include·install_aide |
| 185 | class·install_aide·{ | 173 | class·install_aide·{ |
| 186 | ··package·{·'aide': | 174 | ··package·{·'aide': |
| 187 | ····ensure·=>·'installed', | 175 | ····ensure·=>·'installed', |
| 188 | ··} | 176 | ··} |
| 189 | } | 177 | } |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·install·aide | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 697, 39 lines modified | Offset 697, 14 lines modified | ||
| 697 | » echo·"to·see·what·package·to·(re)install"·>&2 | 697 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 698 | » false··#·end·with·an·error·code | 698 | » false··#·end·with·an·error·code |
| 699 | elif·test·"$rc"·!=·0;·then | 699 | elif·test·"$rc"·!=·0;·then |
| 700 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 700 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 701 | » false··#·end·with·an·error·code | 701 | » false··#·end·with·an·error·code |
| 702 | fi | 702 | fi |
| 703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 704 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 705 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 706 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 707 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 708 | --- | ||
| 709 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 710 | kind:·MachineConfig | ||
| 711 | spec: | ||
| 712 | ··config: | ||
| 713 | ····ignition: | ||
| 714 | ······version:·3.1.0 | ||
| 715 | ····systemd: | ||
| 716 | ······units: | ||
| 717 | ········-·name:·configure-crypto-policy.service | ||
| 718 | ··········enabled:·true | ||
| 719 | ··········contents:·| | ||
| 720 | ············[Unit] | ||
| 721 | ············Before=kubelet.service | ||
| 722 | ············[Service] | ||
| 723 | ············Type=oneshot | ||
| 724 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 725 | ············RemainAfterExit=yes | ||
| 726 | ············[Install] | ||
| 727 | ············WantedBy=multi-user.target | ||
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 254778/260335 bytes (97.87%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15253, 237 lines modified | Offset 15253, 237 lines modified | ||
| 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b9b0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003b9c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b9d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b9e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b9f0:·2069·643d·2269·646d·3739·3830·223e·3c74···id="idm7980"><t | |||
| 0003ba00:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ba10:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ba20:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ba30:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ba40:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ba50:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ba60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba70:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ba80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba90:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003baa0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bab0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bac0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bad0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bae0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003baf0:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 0003bb00:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003bb10:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bb20:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bb30:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bb40:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bb50:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bb60:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003bb70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bb80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bb90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bba0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bbb0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b9b0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b9c0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003bbd0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003bbe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bbf0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bc00:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bc10:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003bc20:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bc30:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bc40:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bc50:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bc60:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bc70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bc80:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bc90:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bca0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bcb0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bcc0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bcd0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bce0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bcf0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd00:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003bd10:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003bd20:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003bd30:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003bd40:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003bd50:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003bd60:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003bd70:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003bd80:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003bd90:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003bda0:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 0003bdb0:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 0003bdc0:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003bdd0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003bde0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003bdf0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003be00:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003be10:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003be20:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003be30:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003be40:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003be50:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003be60:·7461·7267·6574·3d22·2369·646d·3739·3832··target="#idm7982 | |||
| 0003be70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003be80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003be90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003beb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bed0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b | 0003b9d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003b9e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b9f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003ba00:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | ||
| 0003bf20:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bf30:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bf40:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bf50:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bf60:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bf70:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bf80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b | 0003ba10:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003ba20:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003ba30:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003ba40:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ba50:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ba60:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ba70:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ba80:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ba90:·7461·7267·6574·3d22·2369·646d·3739·3831··target="#idm7981 | |||
| Max diff block lines reached; 2079421/2111905 bytes (98.46%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 116, 21 lines modified | Offset 116, 19 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package | 124 | [[packages]] |
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 161, 38 lines modified | Offset 159, 40 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 161 | ··-·low_complexity |
| 164 | ··-·low_disruption | 162 | ··-·low_disruption |
| 165 | ··-·medium_severity | 163 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | include·install_aide | 171 | include·install_aide |
| 184 | class·install_aide·{ | 172 | class·install_aide·{ |
| 185 | ··package·{·'aide': | 173 | ··package·{·'aide': |
| 186 | ····ensure·=>·'installed', | 174 | ····ensure·=>·'installed', |
| 187 | ··} | 175 | ··} |
| 188 | } | 176 | } |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·install·aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 194 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 195 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 696, 39 lines modified | Offset 696, 14 lines modified | ||
| 696 | » echo·"to·see·what·package·to·(re)install"·>&2 | 696 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 697 | » false··#·end·with·an·error·code | 697 | » false··#·end·with·an·error·code |
| 698 | elif·test·"$rc"·!=·0;·then | 698 | elif·test·"$rc"·!=·0;·then |
| 699 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 699 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 700 | » false··#·end·with·an·error·code | 700 | » false··#·end·with·an·error·code |
| 701 | fi | 701 | fi |
| 702 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 703 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 704 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 705 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 706 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 707 | --- | ||
| 708 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 709 | kind:·MachineConfig | ||
| 710 | spec: | ||
| 711 | ··config: | ||
| 712 | ····ignition: | ||
| 713 | ······version:·3.1.0 | ||
| 714 | ····systemd: | ||
| 715 | ······units: | ||
| 716 | ········-·name:·configure-crypto-policy.service | ||
| 717 | ··········enabled:·true | ||
| 718 | ··········contents:·| | ||
| 719 | ············[Unit] | ||
| 720 | ············Before=kubelet.service | ||
| 721 | ············[Service] | ||
| 722 | ············Type=oneshot | ||
| 723 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 724 | ············RemainAfterExit=yes | ||
| 725 | ············[Install] | ||
| 726 | ············WantedBy=multi-user.target | ||
| 727 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 702 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 230212/235769 bytes (97.64%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15285, 236 lines modified | Offset 15285, 236 lines modified | ||
| 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bbb0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003bbc0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bbd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bbe0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bbf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bc00:·2269·646d·3739·3830·223e·3c70·7265·3e3c··"idm7980"><pre>< | |||
| 0003bc10:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003bc20:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003bc30:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003bc40:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bc50:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bc60:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bc70:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bc80:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bc90:·2223·6964·6d37·3938·3122·2074·6162·696e··"#idm7981"·tabin | |||
| 0003bca0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bcb0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bcc0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bcd0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bce0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bcf0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b | 0003bd00:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b | 0003bd10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003bd20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003bd30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003bd40:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | ||
| 0003b | 0003bd50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003bd60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003bd70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003bd80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003bd90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003bda0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003bdb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003bdc0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003bdd0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003bde0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003bdf0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003be00:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003be10:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003be20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003be30:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003bcf0:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003b | 0003be40:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003be50:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003be60:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003be70:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003be80:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003be90:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003bea0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003beb0:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003bec0:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003bed0:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003bee0:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 0003bef0:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003bf00:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003bf10:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003bf20:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003bf30:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003bf40:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003b | 0003bf50:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003b | 0003bf60:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003b | 0003bf70:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003bd40:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bd50:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003bd60:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bd70:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bd80:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bd90:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bda0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bdb0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bdc0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003bdd0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bde0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b | 0003bf80:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003be00:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 0003be10:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003be20:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003be30:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003be40:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b | 0003bf90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bfa0:·3938·3222·2074·6162·696e·6465·783d·2230··982"·tabindex="0 | |||
| 0003bfb0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bfc0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bfd0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bfe0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bff0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c000:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003c010:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c020:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c030:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c040:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003c050:·3832·223e·3c74·6162·6c65·2063·6c61·7373··82"><table·class | |||
| 0003c060:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c070:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c080:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c090:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c0a0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c0b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c0c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003 | 0003c0d0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003 | 0003c0e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003be80:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003be90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003 | 0003c0f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| Max diff block lines reached; 4124483/4156829 bytes (99.22%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 21 lines modified | Offset 121, 19 lines modified | ||
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 124 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ·············_\x8c_\x8i_\x8s············5.3.1 | 125 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package | 129 | [[packages]] |
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 38 lines modified | Offset 164, 40 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 166 | ··-·low_complexity |
| 169 | ··-·low_disruption | 167 | ··-·low_disruption |
| 170 | ··-·medium_severity | 168 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | [[packages]] | ||
| 181 | name·=·"aide" | ||
| 182 | version·=·"*" | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | 176 | include·install_aide |
| 189 | class·install_aide·{ | 177 | class·install_aide·{ |
| 190 | ··package·{·'aide': | 178 | ··package·{·'aide': |
| 191 | ····ensure·=>·'installed', | 179 | ····ensure·=>·'installed', |
| 192 | ··} | 180 | ··} |
| 193 | } | 181 | } |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 701, 39 lines modified | Offset 701, 14 lines modified | ||
| 701 | » echo·"to·see·what·package·to·(re)install"·>&2 | 701 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 702 | » false··#·end·with·an·error·code | 702 | » false··#·end·with·an·error·code |
| 703 | elif·test·"$rc"·!=·0;·then | 703 | elif·test·"$rc"·!=·0;·then |
| 704 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 704 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 705 | » false··#·end·with·an·error·code | 705 | » false··#·end·with·an·error·code |
| 706 | fi | 706 | fi |
| 707 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 708 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 709 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 710 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 711 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 712 | --- | ||
| 713 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 714 | kind:·MachineConfig | ||
| 715 | spec: | ||
| 716 | ··config: | ||
| 717 | ····ignition: | ||
| 718 | ······version:·3.1.0 | ||
| 719 | ····systemd: | ||
| 720 | ······units: | ||
| 721 | ········-·name:·configure-crypto-policy.service | ||
| 722 | ··········enabled:·true | ||
| 723 | ··········contents:·| | ||
| 724 | ············[Unit] | ||
| 725 | ············Before=kubelet.service | ||
| 726 | ············[Service] | ||
| 727 | ············Type=oneshot | ||
| 728 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 729 | ············RemainAfterExit=yes | ||
| 730 | ············[Install] | ||
| 731 | ············WantedBy=multi-user.target | ||
| 732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 707 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 376986/382543 bytes (98.55%) of diff not shown. | |||
| Offset 14469, 15 lines modified | Offset 14469, 15 lines modified | ||
| 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000388b0:·6620·3230·323 | 000388b0:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bba0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003bbb0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003bbc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bbd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bbe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bbf0:·643d·2269·646d·3739·3830·223e·3c70·7265··d="idm7980"><pre | |||
| 0003bc00:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003bc10:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003bc20:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003bc30:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bc40:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bc50:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bc60:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bc70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bc80:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bc90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bca0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bcb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bcc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bcd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bce0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b | 0003bcf0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003b | 0003bd00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003bd10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003bd20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003bd30:·6964·6d37·3938·3122·3e3c·7461·626c·6520··idm7981"><table· | ||
| 0003b | 0003bd40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003bd50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003bd60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003bd70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003bd80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003bd90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003bda0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003bdb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003bdc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003bdd0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003bde0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003bdf0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003be00:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b | 0003be10:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b | 0003be20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003bce0:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003b | 0003be30:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003be40:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003be50:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003be60:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003be70:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003be80:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003be90:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003bea0:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003beb0:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003bec0:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003bed0:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 0003bee0:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003bef0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003bf00:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003bf10:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003bf20:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003bf30:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b | 0003bf40:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b | 0003bf50:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b | 0003bf60:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b | 0003bf70:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b | 0003bf80:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b | 0003bf90:·6d37·3938·3222·2074·6162·696e·6465·783d··m7982"·tabindex= | ||
| 0003b | 0003bfa0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b | 0003bfb0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b | 0003bfc0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bd9 | 0003bfd0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b | 0003bfe0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bdb0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bdc0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bdd0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bde0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bdf0:·2220·6964·3d22·6964·6d37·3938·3122·3e3c··"·id="idm7981">< | |||
| 0003be00:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003be10:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003be20:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003be30:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b | 0003bff0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003c000:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c010:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c020:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c030:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c040:·3739·3832·223e·3c74·6162·6c65·2063·6c61··7982"><table·cla | |||
| 0003c050:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c060:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c070:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c080:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c090:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c0a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c0b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003 | 0003c0c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003 | 0003c0d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003be70:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003be80:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003 | 0003c0e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003c0f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c100:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003 | 0003c110:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003beb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bec0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bed0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bee0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 3632177/3664523 bytes (99.12%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:8 | 65 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 21 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package | 130 | [[packages]] |
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 38 lines modified | Offset 165, 40 lines modified | ||
| 167 | ··-·PCI-DSSv4-11.5.2 | 165 | ··-·PCI-DSSv4-11.5.2 |
| 168 | ··-·enable_strategy | 166 | ··-·enable_strategy |
| 169 | ··-·low_complexity | 167 | ··-·low_complexity |
| 170 | ··-·low_disruption | 168 | ··-·low_disruption |
| 171 | ··-·medium_severity | 169 | ··-·medium_severity |
| 172 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 173 | ··-·package_aide_installed | 171 | ··-·package_aide_installed |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | [[packages]] | ||
| 182 | name·=·"aide" | ||
| 183 | version·=·"*" | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | 177 | include·install_aide |
| 190 | class·install_aide·{ | 178 | class·install_aide·{ |
| 191 | ··package·{·'aide': | 179 | ··package·{·'aide': |
| 192 | ····ensure·=>·'installed', | 180 | ····ensure·=>·'installed', |
| 193 | ··} | 181 | ··} |
| 194 | } | 182 | } |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·install·aide | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 195 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 196 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 196 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 197 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 197 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 198 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 198 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 322, 14 lines modified | Offset 322, 18 lines modified | ||
| 322 | ·············_\x8i_\x8s_\x8m······1446 | 322 | ·············_\x8i_\x8s_\x8m······1446 |
| 323 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 323 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 324 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 324 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 325 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 325 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 326 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 326 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 328 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 328 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [customizations] | ||
| 331 | fips·=·true | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | 333 | #·Remediation·is·applicable·only·in·certain·platforms |
| 331 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 334 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 332 | var_system_crypto_policy='FIPS' | 335 | var_system_crypto_policy='FIPS' |
| Offset 460, 18 lines modified | Offset 464, 14 lines modified | ||
| 460 | ··-·NIST-800-53-SC-13 | 464 | ··-·NIST-800-53-SC-13 |
| 461 | ··-·enable_fips_mode | 465 | ··-·enable_fips_mode |
| 462 | ··-·high_severity | 466 | ··-·high_severity |
| 463 | ··-·medium_complexity | 467 | ··-·medium_complexity |
| 464 | ··-·medium_disruption | 468 | ··-·medium_disruption |
| 465 | ··-·reboot_required | 469 | ··-·reboot_required |
| 466 | ··-·restrict_strategy | 470 | ··-·restrict_strategy |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | [customizations] | ||
| 469 | fips·=·true | ||
| 470 | Group ·System·Cryptographic·Policies· Group·contains·8·rules | 471 | Group ·System·Cryptographic·Policies· Group·contains·8·rules |
| 471 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 472 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 472 | ····*·GnuTLS·library | 473 | ····*·GnuTLS·library |
| Max diff block lines reached; 440258/447187 bytes (98.45%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000386a0:·3 | 000386a0:·362d·3031·2d32·3829·0a20·2020·2020·2020··6-01-28).······· | ||
| 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 17511, 183 lines modified | Offset 17511, 183 lines modified | ||
| 00044660:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00044660:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00044670:·6964·6d38·3736·3522·2074·6162·696e·6465··idm8765"·tabinde | 00044670:·6964·6d38·3736·3522·2074·6162·696e·6465··idm8765"·tabinde | ||
| 00044680:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00044680:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00044690:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00044690:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 000446a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 000446a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 000446b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 000446b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000446c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000446c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000446d0:·656d·6564·6961·7469·6f6e·204 | 000446d0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 000446e0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 000446f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00044700:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00044710:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00044720:·646d·3837·3635·223e·3c74·6162·6c65·2063··dm8765"><table·c | |||
| 00044730:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00044740:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00044750:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00044760:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00044770:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000446e0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 000446f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00044700:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00044710:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00044720:·3d22·6964·6d38·3736·3522·3e3c·7461·626c··="idm8765"><tabl | |||
| 00044730:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00044740:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00044750:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00044760:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00044770:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00044780:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00044790:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000447a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000447 | 00044780:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 000447c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 000447 | 00044790:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 000447a0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 000447b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000447c0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000447d0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000447e0:· | 000447e0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 000447f0:·6 | 000447f0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 00044800:· | 00044800:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 00044810:· | 00044810:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 00044820:·6f64·653e·2d2d·2d0a·6170·6956·6572·7369··ode>---.apiVersi | |||
| 00044830:·6f6e·3a20·6d61·6368·696e·6563·6f6e·6669··on:·machineconfi | |||
| 00044840:·6775·7261·7469·6f6e·2e6f·7065·6e73·6869··guration.openshi | |||
| 00044850:·6674·2e69·6f2f·7631·0a6b·696e·643a·204d··ft.io/v1.kind:·M | |||
| 00044860:·6163·6869·6e65·436f·6e66·6967·0a73·7065··achineConfig.spe | |||
| 00044870:·633a·0a20·2063·6f6e·6669·673a·0a20·2020··c:.··config:.··· | |||
| 00044880:·2069·676e·6974·696f·6e3a·0a20·2020·2020···ignition:.····· | |||
| 00044890:·2076·6572·7369·6f6e·3a20·332e·312e·300a···version:·3.1.0. | |||
| 000448a0:·2020·2020·7379·7374·656d·643a·0a20·2020······systemd:.··· | |||
| 000448b0:·2020·2075·6e69·7473·3a0a·2020·2020·2020·····units:.······ | |||
| 000448c0:·2020·2d20·6e61·6d65·3a20·636f·6e66·6967····-·name:·config | |||
| 000448d0:·7572·652d·6372·7970·746f·2d70·6f6c·6963··ure-crypto-polic | |||
| 000448e0:·792e·7365·7276·6963·650a·2020·2020·2020··y.service.······ | |||
| 000448f0:·2020·2020·656e·6162·6c65·643a·2074·7275······enabled:·tru | |||
| 00044900:·650a·2020·2020·2020·2020·2020·636f·6e74··e.··········cont | |||
| 00044910:·656e·7473·3a20·7c0a·2020·2020·2020·2020··ents:·|.········ | |||
| 00044920:·2020·2020·5b55·6e69·745d·0a20·2020·2020······[Unit].····· | |||
| 00044930:·2020·2020·2020·2042·6566·6f72·653d·6b75·········Before=ku | |||
| 00044940:·6265·6c65·742e·7365·7276·6963·650a·2020··belet.service.·· | |||
| 00044950:·2020·2020·2020·2020·2020·5b53·6572·7669············[Servi | |||
| 00044960:·6365·5d0a·2020·2020·2020·2020·2020·2020··ce].············ | |||
| 00044970:·5479·7065·3d6f·6e65·7368·6f74·0a20·2020··Type=oneshot.··· | |||
| 00044980:·2020·2020·2020·2020·2045·7865·6353·7461···········ExecSta | |||
| 00044990:·7274·3d75·7064·6174·652d·6372·7970·746f··rt=update-crypto | |||
| 000449a0:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | |||
| 000449b0:·7b7b·2e76·6172·5f73·7973·7465·6d5f·6372··{{.var_system_cr | |||
| 000449c0:·7970·746f·5f70·6f6c·6963·797d·7d0a·2020··ypto_policy}}.·· | |||
| 000449d0:·2020·2020·2020·2020·2020·5265·6d61·696e············Remain | |||
| 000449e0:·4166·7465·7245·7869·743d·7965·730a·2020··AfterExit=yes.·· | |||
| 000449f0:·2020·2020·2020·2020·2020·5b49·6e73·7461············[Insta | |||
| 00044a00:·6c6c·5d0a·2020·2020·2020·2020·2020·2020··ll].············ | |||
| 00044a10:·5761·6e74·6564·4279·3d6d·756c·7469·2d75··WantedBy=multi-u | |||
| 00044a20:·7365·722e·7461·7267·6574·0a3c·2f63·6f64··ser.target.</cod | |||
| 00044a30:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00044a40:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00044a50:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00044a60:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00044a70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00044a80:·6d38·3736·3622·2074·6162·696e·6465·783d··m8766"·tabindex= | |||
| 00044a90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00044aa0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00044ab0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00044ac0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00044ad0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00044ae0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 00044af0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00044b00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00044b10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00044b20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00044b30:·3837·3636·223e·3c74·6162·6c65·2063·6c61··8766"><table·cla | |||
| 00044b40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00044b50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00044b60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00044b70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00044b80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00044b90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00044ba0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00044bb0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00044bc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00044bd0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00044be0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00044bf0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00044c00:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 00044c10:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 00044c20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00044 | 00044820:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | ||
| 00044 | 00044830:·5661·6c75·6520·7661·725f·7379·7374·656d··Value·var_system | ||
| 00044 | 00044840:·5f63·7279·7074·6f5f·706f·6c69·6379·2023··_crypto_policy·# | ||
| 00044 | 00044850:·2070·726f·6d6f·7465·2074·6f20·7661·7269···promote·to·vari | ||
| Max diff block lines reached; 1908437/1933469 bytes (98.71%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 601, 39 lines modified | Offset 601, 14 lines modified | ||
| 601 | » echo·"to·see·what·package·to·(re)install"·>&2 | 601 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 602 | » false··#·end·with·an·error·code | 602 | » false··#·end·with·an·error·code |
| 603 | elif·test·"$rc"·!=·0;·then | 603 | elif·test·"$rc"·!=·0;·then |
| 604 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 604 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 605 | » false··#·end·with·an·error·code | 605 | » false··#·end·with·an·error·code |
| 606 | fi | 606 | fi |
| 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 612 | --- | ||
| 613 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 614 | kind:·MachineConfig | ||
| 615 | spec: | ||
| 616 | ··config: | ||
| 617 | ····ignition: | ||
| 618 | ······version:·3.1.0 | ||
| 619 | ····systemd: | ||
| 620 | ······units: | ||
| 621 | ········-·name:·configure-crypto-policy.service | ||
| 622 | ··········enabled:·true | ||
| 623 | ··········contents:·| | ||
| 624 | ············[Unit] | ||
| 625 | ············Before=kubelet.service | ||
| 626 | ············[Service] | ||
| 627 | ············Type=oneshot | ||
| 628 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 629 | ············RemainAfterExit=yes | ||
| 630 | ············[Install] | ||
| 631 | ············WantedBy=multi-user.target | ||
| 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 637 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 612 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 638 | ··set_fact: | 613 | ··set_fact: |
| Offset 680, 14 lines modified | Offset 655, 39 lines modified | ||
| 680 | ··-·PCI-DSSv4-2.2.7 | 655 | ··-·PCI-DSSv4-2.2.7 |
| 681 | ··-·configure_crypto_policy | 656 | ··-·configure_crypto_policy |
| 682 | ··-·high_severity | 657 | ··-·high_severity |
| 683 | ··-·low_complexity | 658 | ··-·low_complexity |
| 684 | ··-·low_disruption | 659 | ··-·low_disruption |
| 685 | ··-·no_reboot_needed | 660 | ··-·no_reboot_needed |
| 686 | ··-·restrict_strategy | 661 | ··-·restrict_strategy |
| 662 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 663 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 664 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 665 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 666 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 667 | --- | ||
| 668 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 669 | kind:·MachineConfig | ||
| 670 | spec: | ||
| 671 | ··config: | ||
| 672 | ····ignition: | ||
| 673 | ······version:·3.1.0 | ||
| 674 | ····systemd: | ||
| 675 | ······units: | ||
| 676 | ········-·name:·configure-crypto-policy.service | ||
| 677 | ··········enabled:·true | ||
| 678 | ··········contents:·| | ||
| 679 | ············[Unit] | ||
| 680 | ············Before=kubelet.service | ||
| 681 | ············[Service] | ||
| 682 | ············Type=oneshot | ||
| 683 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 684 | ············RemainAfterExit=yes | ||
| 685 | ············[Install] | ||
| 686 | ············WantedBy=multi-user.target | ||
| 687 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 687 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 688 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 688 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 689 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 689 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 690 | Severity: ···medium | 690 | Severity: ···medium |
| 691 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 691 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 692 | Identifiers:·CCE-80939-2 | 692 | Identifiers:·CCE-80939-2 |
| 693 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 693 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1038, 21 lines modified | Offset 1038, 19 lines modified | ||
| 1038 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1038 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1039 | The·rear·package·can·be·installed·with·the·following·command: | 1039 | The·rear·package·can·be·installed·with·the·following·command: |
| 1040 | $·sudo·yum·install·rear | 1040 | $·sudo·yum·install·rear |
| 1041 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1041 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1042 | Severity: ···medium | 1042 | Severity: ···medium |
| 1043 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 1043 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1044 | Identifiers:·CCE-82883-0 | 1044 | Identifiers:·CCE-82883-0 |
| 1045 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1045 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1046 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1047 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1048 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1049 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1050 | package | 1046 | [[packages]] |
| 1047 | name·=·"rear" | ||
| 1048 | version·=·"*" | ||
| 1051 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1049 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1052 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1050 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1053 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1051 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1054 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1052 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1055 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1053 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1056 | #·Remediation·is·applicable·only·in·certain·platforms | 1054 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1057 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 1055 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1082, 38 lines modified | Offset 1080, 40 lines modified | ||
| 1082 | ··-·CCE-82883-0 | 1080 | ··-·CCE-82883-0 |
| 1083 | ··-·enable_strategy | 1081 | ··-·enable_strategy |
| 1084 | ··-·low_complexity | 1082 | ··-·low_complexity |
| 1085 | ··-·low_disruption | 1083 | ··-·low_disruption |
| 1086 | ··-·medium_severity | 1084 | ··-·medium_severity |
| 1087 | ··-·no_reboot_needed | 1085 | ··-·no_reboot_needed |
| Max diff block lines reached; 171308/177810 bytes (96.34%) of diff not shown. | |||
| Offset 14455, 16 lines modified | Offset 14455, 16 lines modified | ||
| 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000387d0:·2020·2861·7320·6f66·2032·3032·3 | 000387d0:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 000387e0:·2d32·3 | 000387e0:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 16891, 182 lines modified | Offset 16891, 182 lines modified | ||
| 00041fa0:·2d74·6172·6765·743d·2223·6964·6d38·3736··-target="#idm876 | 00041fa0:·2d74·6172·6765·743d·2223·6964·6d38·3736··-target="#idm876 | ||
| 00041fb0:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | 00041fb0:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | ||
| 00041fc0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00041fc0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00041fd0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00041fd0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00041fe0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00041fe0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00041ff0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00041ff0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00042000:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00042000:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00042010:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00042020:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00042030:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00042040:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00042050:·7073·6522·2069·643d·2269·646d·3837·3635··pse"·id="idm8765 | |||
| 00042060:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00042070:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00042010:·7469·6f6e·204b·7562·6572·6e65·7465·7320··tion·Kubernetes· | |||
| 00042020:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00042030:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00042040:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00042050:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00042060:·3736·3522·3e3c·7461·626c·6520·636c·6173··765"><table·clas | |||
| 00042070:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00042080:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000420 | 00042080:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 000420a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000420b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000420c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000420 | 00042090:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 000420a0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000420b0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000420c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000420d0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000420e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000420f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00042 | 00042100:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 000420f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00042100:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00042110:· | 00042110:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 00042120:· | 00042120:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 00042130:· | 00042130:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 00042140:· | 00042140:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 00042150:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d2d··le><pre><code>-- | |||
| 00042160:·2d0a·6170·6956·6572·7369·6f6e·3a20·6d61··-.apiVersion:·ma | |||
| 00042170:·6368·696e·6563·6f6e·6669·6775·7261·7469··chineconfigurati | |||
| 00042180:·6f6e·2e6f·7065·6e73·6869·6674·2e69·6f2f··on.openshift.io/ | |||
| 00042190:·7631·0a6b·696e·643a·204d·6163·6869·6e65··v1.kind:·Machine | |||
| 000421a0:·436f·6e66·6967·0a73·7065·633a·0a20·2063··Config.spec:.··c | |||
| 000421b0:·6f6e·6669·673a·0a20·2020·2069·676e·6974··onfig:.····ignit | |||
| 000421c0:·696f·6e3a·0a20·2020·2020·2076·6572·7369··ion:.······versi | |||
| 000421d0:·6f6e·3a20·332e·312e·300a·2020·2020·7379··on:·3.1.0.····sy | |||
| 000421e0:·7374·656d·643a·0a20·2020·2020·2075·6e69··stemd:.······uni | |||
| 000421f0:·7473·3a0a·2020·2020·2020·2020·2d20·6e61··ts:.········-·na | |||
| 00042200:·6d65·3a20·636f·6e66·6967·7572·652d·6372··me:·configure-cr | |||
| 00042210:·7970·746f·2d70·6f6c·6963·792e·7365·7276··ypto-policy.serv | |||
| 00042220:·6963·650a·2020·2020·2020·2020·2020·656e··ice.··········en | |||
| 00042230:·6162·6c65·643a·2074·7275·650a·2020·2020··abled:·true.···· | |||
| 00042240:·2020·2020·2020·636f·6e74·656e·7473·3a20········contents:· | |||
| 00042250:·7c0a·2020·2020·2020·2020·2020·2020·5b55··|.············[U | |||
| 00042260:·6e69·745d·0a20·2020·2020·2020·2020·2020··nit].··········· | |||
| 00042270:·2042·6566·6f72·653d·6b75·6265·6c65·742e···Before=kubelet. | |||
| 00042280:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 00042290:·2020·2020·5b53·6572·7669·6365·5d0a·2020······[Service].·· | |||
| 000422a0:·2020·2020·2020·2020·2020·5479·7065·3d6f············Type=o | |||
| 000422b0:·6e65·7368·6f74·0a20·2020·2020·2020·2020··neshot.········· | |||
| 000422c0:·2020·2045·7865·6353·7461·7274·3d75·7064·····ExecStart=upd | |||
| 000422d0:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 000422e0:·6965·7320·2d2d·7365·7420·7b7b·2e76·6172··ies·--set·{{.var | |||
| 000422f0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 00042300:·6f6c·6963·797d·7d0a·2020·2020·2020·2020··olicy}}.········ | |||
| 00042310:·2020·2020·5265·6d61·696e·4166·7465·7245······RemainAfterE | |||
| 00042320:·7869·743d·7965·730a·2020·2020·2020·2020··xit=yes.········ | |||
| 00042330:·2020·2020·5b49·6e73·7461·6c6c·5d0a·2020······[Install].·· | |||
| 00042340:·2020·2020·2020·2020·2020·5761·6e74·6564············Wanted | |||
| 00042350:·4279·3d6d·756c·7469·2d75·7365·722e·7461··By=multi-user.ta | |||
| 00042360:·7267·6574·0a3c·2f63·6f64·653e·3c2f·7072··rget.</code></pr | |||
| 00042370:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00042380:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00042390:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 000423a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 000423b0:·6172·6765·743d·2223·6964·6d38·3736·3622··arget="#idm8766" | |||
| 000423c0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000423d0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000423e0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000423f0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00042400:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00042410:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00042420:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00042430:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00042440:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00042450:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00042460:·6522·2069·643d·2269·646d·3837·3636·223e··e"·id="idm8766"> | |||
| 00042470:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00042480:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00042490:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000424a0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000424b0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000424c0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000424d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000424e0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000424f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00042500:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00042510:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00042520:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00042530:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00042540:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 00042550:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00042 | 00042150:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 00042 | 00042160:·6d65·3a20·5843·4344·4620·5661·6c75·6520··me:·XCCDF·Value· | ||
| 00042170:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 00042180:·6f5f·706f·6c69·6379·2023·2070·726f·6d6f··o_policy·#·promo | |||
| 00042190:·7465·2074·6f20·7661·7269·6162·6c65·0a20··te·to·variable.· | |||
| Max diff block lines reached; 2081897/2106929 bytes (98.81%) of diff not shown. | |||
| Offset 57, 15 lines modified | Offset 57, 15 lines modified | ||
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 469, 39 lines modified | Offset 469, 14 lines modified | ||
| 469 | » echo·"to·see·what·package·to·(re)install"·>&2 | 469 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 470 | » false··#·end·with·an·error·code | 470 | » false··#·end·with·an·error·code |
| 471 | elif·test·"$rc"·!=·0;·then | 471 | elif·test·"$rc"·!=·0;·then |
| 472 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 472 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 473 | » false··#·end·with·an·error·code | 473 | » false··#·end·with·an·error·code |
| 474 | fi | 474 | fi |
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 480 | --- | ||
| 481 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 482 | kind:·MachineConfig | ||
| 483 | spec: | ||
| 484 | ··config: | ||
| 485 | ····ignition: | ||
| 486 | ······version:·3.1.0 | ||
| 487 | ····systemd: | ||
| 488 | ······units: | ||
| 489 | ········-·name:·configure-crypto-policy.service | ||
| 490 | ··········enabled:·true | ||
| 491 | ··········contents:·| | ||
| 492 | ············[Unit] | ||
| 493 | ············Before=kubelet.service | ||
| 494 | ············[Service] | ||
| 495 | ············Type=oneshot | ||
| 496 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 497 | ············RemainAfterExit=yes | ||
| 498 | ············[Install] | ||
| 499 | ············WantedBy=multi-user.target | ||
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 505 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 480 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 506 | ··set_fact: | 481 | ··set_fact: |
| Offset 548, 14 lines modified | Offset 523, 39 lines modified | ||
| 548 | ··-·PCI-DSSv4-2.2.7 | 523 | ··-·PCI-DSSv4-2.2.7 |
| 549 | ··-·configure_crypto_policy | 524 | ··-·configure_crypto_policy |
| 550 | ··-·high_severity | 525 | ··-·high_severity |
| 551 | ··-·low_complexity | 526 | ··-·low_complexity |
| 552 | ··-·low_disruption | 527 | ··-·low_disruption |
| 553 | ··-·no_reboot_needed | 528 | ··-·no_reboot_needed |
| 554 | ··-·restrict_strategy | 529 | ··-·restrict_strategy |
| 530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 535 | --- | ||
| 536 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 537 | kind:·MachineConfig | ||
| 538 | spec: | ||
| 539 | ··config: | ||
| 540 | ····ignition: | ||
| 541 | ······version:·3.1.0 | ||
| 542 | ····systemd: | ||
| 543 | ······units: | ||
| 544 | ········-·name:·configure-crypto-policy.service | ||
| 545 | ··········enabled:·true | ||
| 546 | ··········contents:·| | ||
| 547 | ············[Unit] | ||
| 548 | ············Before=kubelet.service | ||
| 549 | ············[Service] | ||
| 550 | ············Type=oneshot | ||
| 551 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 552 | ············RemainAfterExit=yes | ||
| 553 | ············[Install] | ||
| 554 | ············WantedBy=multi-user.target | ||
| 555 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 555 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 556 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 556 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 557 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 557 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 558 | Severity: ···medium | 558 | Severity: ···medium |
| 559 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 559 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 560 | Identifiers:·CCE-80939-2 | 560 | Identifiers:·CCE-80939-2 |
| 561 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 561 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1553, 21 lines modified | Offset 1553, 18 lines modified | ||
| 1553 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1553 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1554 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1554 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1555 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 | 1555 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1556 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1556 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1557 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1557 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-08-040180 | 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-08-040180 |
| 1559 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule | 1559 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule |
| 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1565 | 1561 | [customizations.services] | |
| 1562 | masked·=·["debug-shell"] | ||
| 1566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1567 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1568 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1569 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1570 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1571 | #·Remediation·is·applicable·only·in·certain·platforms | 1568 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1572 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1569 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1585, 33 lines modified | Offset 1582, 14 lines modified | ||
| 1585 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1582 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1586 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1583 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1587 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1584 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1588 | else | 1585 | else |
| 1589 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1586 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1590 | fi | 1587 | fi |
| Max diff block lines reached; 159541/166028 bytes (96.09%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·2020·2861·7320·6f66·2032·3032·3 | 00038760:·2020·2861·7320·6f66·2032·3032·362d·3031····(as·of·2026-01 | ||
| 00038770:·2d32·3 | 00038770:·2d32·3829·0a20·2020·2020·2020·2020·2020··-28).··········· | ||
| 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 17360, 236 lines modified | Offset 17360, 236 lines modified | ||
| 00043cf0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 00043cf0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 00043d00:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00043d00:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00043d10:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00043d10:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00043d20:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00043d20:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00043d30:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00043d30:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00043d40:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00043d40:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00043d50:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00043d50:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00043d60:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00043d70:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00043d80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00043d90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00043da0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00043db0:·643d·2269·646d·3739·3830·223e·3c70·7265··d="idm7980"><pre | |||
| 00043dc0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00043dd0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 00043de0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 00043df0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00043e00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00043e10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00043e20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00043e30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00043e40:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 00043e50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00043e60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00043e70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00043e80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00043e90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00043ea0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00043 | 00043eb0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 00043 | 00043ec0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00043 | 00043ed0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00043 | 00043ee0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00043 | 00043ef0:·6964·6d37·3938·3122·3e3c·7461·626c·6520··idm7981"><table· | ||
| 00043 | 00043f00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 00043 | 00043f10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 00043 | 00043f20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 00043 | 00043f30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 00043 | 00043f40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 00043 | 00043f50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00043 | 00043f60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 00043 | 00043f70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 00043 | 00043f80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 00043 | 00043f90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 00043 | 00043fa0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 00043 | 00043fb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 00043 | 00043fc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 00043 | 00043fd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 00043 | 00043fe0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 00043ea0:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 00043 | 00043ff0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 00044000:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 00044010:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 00044020:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 00044030:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 00044040:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 00044050:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 00044060:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 00044070:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 00044080:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 00044090:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 000440a0:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 000440b0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 000440c0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 000440d0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 000440e0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 000440f0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 00043ec | 00044100:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0004 | 00044110:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0004 | 00044120:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0004 | 00044130:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 00043f00:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | |||
| 0004 | 00044140:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00044150:·6d37·3938·3222·2074·6162·696e·6465·783d··m7982"·tabindex= | |||
| 00043 | 00044160:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0004 | 00044170:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0004 | 00044180:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0004 | 00044190:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0004 | 000441a0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00043f70:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00043f80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00043f90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00043fa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00043fb0:·2220·6964·3d22·6964·6d37·3938·3122·3e3c··"·id="idm7981">< | |||
| 00043fc0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00043fd0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00043fe0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00043ff0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00044 | 000441b0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 000441c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000441d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000441e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000441f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00044200:·3739·3832·223e·3c74·6162·6c65·2063·6c61··7982"><table·cla | |||
| 00044210:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00044220:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00044230:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00044240:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00044250:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00044260:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00044270:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00044 | 00044280:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 00044 | 00044290:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00044030:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00044040:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00044 | 000442a0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 000442b0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 000442c0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00044 | 000442d0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 00044070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00044080:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| Max diff block lines reached; 2521618/2554102 bytes (98.73%) of diff not shown. | |||
| Offset 55, 15 lines modified | Offset 55, 15 lines modified | ||
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 585, 21 lines modified | Offset 585, 19 lines modified | ||
| 585 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 585 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 586 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 586 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 587 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 587 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 588 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 588 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 589 | ·············_\x8c_\x8i_\x8s············5.3.1 | 589 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 590 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 590 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 591 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 591 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 597 | package | 593 | [[packages]] |
| 594 | name·=·"aide" | ||
| 595 | version·=·"*" | ||
| 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 596 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 597 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 598 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 599 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 600 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 603 | #·Remediation·is·applicable·only·in·certain·platforms | 601 | #·Remediation·is·applicable·only·in·certain·platforms |
| 604 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 602 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 630, 38 lines modified | Offset 628, 40 lines modified | ||
| 630 | ··-·PCI-DSSv4-11.5.2 | 628 | ··-·PCI-DSSv4-11.5.2 |
| 631 | ··-·enable_strategy | 629 | ··-·enable_strategy |
| 632 | ··-·low_complexity | 630 | ··-·low_complexity |
| 633 | ··-·low_disruption | 631 | ··-·low_disruption |
| 634 | ··-·medium_severity | 632 | ··-·medium_severity |
| 635 | ··-·no_reboot_needed | 633 | ··-·no_reboot_needed |
| 636 | ··-·package_aide_installed | 634 | ··-·package_aide_installed |
| 637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 638 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 639 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 640 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 641 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 642 | package·--add=aide | ||
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 644 | [[packages]] | ||
| 645 | name·=·"aide" | ||
| 646 | version·=·"*" | ||
| 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 635 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 636 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 637 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 638 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 639 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 652 | include·install_aide | 640 | include·install_aide |
| 653 | class·install_aide·{ | 641 | class·install_aide·{ |
| 654 | ··package·{·'aide': | 642 | ··package·{·'aide': |
| 655 | ····ensure·=>·'installed', | 643 | ····ensure·=>·'installed', |
| 656 | ··} | 644 | ··} |
| 657 | } | 645 | } |
| 646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 651 | package·install·aide | ||
| 652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 653 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 654 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 655 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 656 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 657 | package·--add=aide | ||
| 658 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 658 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 659 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 659 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 660 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 660 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 661 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 661 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 662 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 662 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 683, 14 lines modified | Offset 683, 18 lines modified | ||
| 683 | ·············_\x8i_\x8s_\x8m······1446 | 683 | ·············_\x8i_\x8s_\x8m······1446 |
| 684 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 684 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 685 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 685 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 686 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 686 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 687 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 687 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 691 | [customizations] | ||
| 692 | fips·=·true | ||
| 690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 691 | #·Remediation·is·applicable·only·in·certain·platforms | 694 | #·Remediation·is·applicable·only·in·certain·platforms |
| 692 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 695 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 693 | var_system_crypto_policy='FIPS' | 696 | var_system_crypto_policy='FIPS' |
| Offset 821, 18 lines modified | Offset 825, 14 lines modified | ||
| 821 | ··-·NIST-800-53-SC-13 | 825 | ··-·NIST-800-53-SC-13 |
| 822 | ··-·enable_fips_mode | 826 | ··-·enable_fips_mode |
| 823 | ··-·high_severity | 827 | ··-·high_severity |
| 824 | ··-·medium_complexity | 828 | ··-·medium_complexity |
| 825 | ··-·medium_disruption | 829 | ··-·medium_disruption |
| 826 | ··-·reboot_required | 830 | ··-·reboot_required |
| 827 | ··-·restrict_strategy | 831 | ··-·restrict_strategy |
| 828 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 829 | [customizations] | ||
| 830 | fips·=·true | ||
| 831 | Group ·System·Cryptographic·Policies· Group·contains·3·rules | 832 | Group ·System·Cryptographic·Policies· Group·contains·3·rules |
| 832 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 833 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 833 | ····*·GnuTLS·library | 834 | ····*·GnuTLS·library |
| Max diff block lines reached; 231592/238501 bytes (97.10%) of diff not shown. | |||
| Offset 14442, 15 lines modified | Offset 14442, 15 lines modified | ||
| 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038700:·6173·206f·6620·3230·323 | 00038700:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15257, 237 lines modified | Offset 15257, 237 lines modified | ||
| 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b9f0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003ba00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ba10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ba20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ba30:·6964·3d22·6964·6d37·3938·3022·3e3c·7461··id="idm7980"><ta | |||
| 0003ba40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ba50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ba60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ba70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ba80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ba90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003baa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bab0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003bac0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bad0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003bae0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003baf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bb00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bb10:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bb20:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003bb30:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003bb40:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 0003bb50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bb60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bb70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bb80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bb90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bba0:·6d37·3938·3122·2074·6162·696e·6465·783d··m7981"·tabindex= | |||
| 0003bbb0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bbc0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bbd0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bbe0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bbf0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b9f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003ba00:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003ba10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ba20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ba30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ba40:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc10:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bc20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bc30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bc40:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003bc50:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bc60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bc70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bc80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bc90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bca0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bcb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bcc0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bcd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bce0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003bcf0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bd00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bd10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bd20:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bd30:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003ba50:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003ba60:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ba70:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bd50:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003bd60:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003bd70:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003bd80:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003bd90:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003bda0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003bdb0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003bdc0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003bdd0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003bde0:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 0003bdf0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003be00:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003be10:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003be20:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003be30:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003be40:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b | 0003ba80:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | ||
| 0003b | 0003ba90:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b | 0003baa0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b | 0003bab0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b | 0003bac0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b | 0003bad0:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | ||
| 0003b | 0003bae0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b | 0003baf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b | 0003bb00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b | 0003bb10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b | 0003bb20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b | 0003bb30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bb40:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003bb50:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bb60:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bf10:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bf20:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bf30:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bf40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bf50:·6522·2069·643d·2269·646d·3739·3832·223e··e"·id="idm7982"> | |||
| 0003bf60:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bf70:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bf80:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bf90:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bfa0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bfb0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bfc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| Max diff block lines reached; 3633488/3665972 bytes (99.11%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 21 lines modified | Offset 114, 19 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package | 122 | [[packages]] |
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 131 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 159, 38 lines modified | Offset 157, 40 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 159 | ··-·low_complexity |
| 162 | ··-·low_disruption | 160 | ··-·low_disruption |
| 163 | ··-·medium_severity | 161 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | include·install_aide | 169 | include·install_aide |
| 182 | class·install_aide·{ | 170 | class·install_aide·{ |
| 183 | ··package·{·'aide': | 171 | ··package·{·'aide': |
| 184 | ····ensure·=>·'installed', | 172 | ····ensure·=>·'installed', |
| 185 | ··} | 173 | ··} |
| 186 | } | 174 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·install·aide | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=aide | ||
| 187 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 187 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 188 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 188 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 189 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 189 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 190 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 190 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 314, 14 lines modified | Offset 314, 18 lines modified | ||
| 314 | ·············_\x8i_\x8s_\x8m······1446 | 314 | ·············_\x8i_\x8s_\x8m······1446 |
| 315 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 315 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 316 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 316 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 317 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 317 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 318 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 318 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 319 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 319 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 320 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 320 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 322 | [customizations] | ||
| 323 | fips·=·true | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 322 | #·Remediation·is·applicable·only·in·certain·platforms | 325 | #·Remediation·is·applicable·only·in·certain·platforms |
| 323 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 326 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 324 | var_system_crypto_policy='FIPS:OSPP' | 327 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 452, 18 lines modified | Offset 456, 14 lines modified | ||
| 452 | ··-·NIST-800-53-SC-13 | 456 | ··-·NIST-800-53-SC-13 |
| 453 | ··-·enable_fips_mode | 457 | ··-·enable_fips_mode |
| 454 | ··-·high_severity | 458 | ··-·high_severity |
| 455 | ··-·medium_complexity | 459 | ··-·medium_complexity |
| 456 | ··-·medium_disruption | 460 | ··-·medium_disruption |
| 457 | ··-·reboot_required | 461 | ··-·reboot_required |
| 458 | ··-·restrict_strategy | 462 | ··-·restrict_strategy |
| 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 460 | [customizations] | ||
| 461 | fips·=·true | ||
| 462 | Group ·System·Cryptographic·Policies· Group·contains·8·rules | 463 | Group ·System·Cryptographic·Policies· Group·contains·8·rules |
| 463 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 464 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 464 | ····*·GnuTLS·library | 465 | ····*·GnuTLS·library |
| Max diff block lines reached; 440258/447192 bytes (98.45%) of diff not shown. | |||
| Offset 14437, 15 lines modified | Offset 14437, 15 lines modified | ||
| 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000386b0:·3032·3 | 000386b0:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16662, 237 lines modified | Offset 16662, 237 lines modified | ||
| 00041150:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00041150:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00041160:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 00041160:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 00041170:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00041170:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00041180:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00041180:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00041190:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00041190:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000411a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000411a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000411b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000411b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000411c0:·6d65·6469·6174·696f·6e20· | 000411c0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 000411d0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 000411e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000411f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041200:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041210:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 000411d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 000411e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000411f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00041200:·2069·643d·2269·646d·3739·3830·223e·3c74···id="idm7980"><t | |||
| 00041210:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00041220:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00041230:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00041240:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00041250:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00041260:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00041270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00041280:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00041290:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000412a0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000412b0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 000412c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000412d0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 000412e0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 000412f0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00041300:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 00041310:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 00041320:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00041330:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 00041340:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00041350:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00041360:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00041370:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 00041380:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00041390:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 000413a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 000413b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 000413c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 000413d0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 000413e0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 000413f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00041400:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041410:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 00041420:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 00041430:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041440:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00041450:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041460:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041470:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041480:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041490:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000414a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000414b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000414c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000414d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000414e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000414f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00041500:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00041 | 00041220:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 00041230:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00041240:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 00041520:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 00041530:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 00041540:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 00041550:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 00041560:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 00041570:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 00041580:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 00041590:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 000415a0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 000415b0:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 000415c0:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 000415d0:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 000415e0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 000415f0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 00041600:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 00041610:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 00041 | 00041250:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 00041 | 00041260:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 00041 | 00041270:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 00041 | 00041280:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 00041 | 00041290:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 00041 | 000412a0:·7461·7267·6574·3d22·2369·646d·3739·3831··target="#idm7981 | ||
| 00041 | 000412b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000412c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 000412d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 000412e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 000412f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00041300:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00041310:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 00041320:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00041330:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00041340:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00041350:·2069·643d·2269·646d·3739·3831·223e·3c74···id="idm7981"><t | |||
| 00041360:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00041370:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00041380:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00041390:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000413a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000413b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000413c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000413d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000413e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000413f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| Max diff block lines reached; 2575413/2607897 bytes (98.75%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 437, 21 lines modified | Offset 437, 19 lines modified | ||
| 437 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 437 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 439 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 439 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 440 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ·············_\x8c_\x8i_\x8s············5.3.1 | 441 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 442 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 443 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 449 | package | 445 | [[packages]] |
| 446 | name·=·"aide" | ||
| 447 | version·=·"*" | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 455 | #·Remediation·is·applicable·only·in·certain·platforms | 453 | #·Remediation·is·applicable·only·in·certain·platforms |
| 456 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 454 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 482, 38 lines modified | Offset 480, 40 lines modified | ||
| 482 | ··-·PCI-DSSv4-11.5.2 | 480 | ··-·PCI-DSSv4-11.5.2 |
| 483 | ··-·enable_strategy | 481 | ··-·enable_strategy |
| 484 | ··-·low_complexity | 482 | ··-·low_complexity |
| 485 | ··-·low_disruption | 483 | ··-·low_disruption |
| 486 | ··-·medium_severity | 484 | ··-·medium_severity |
| 487 | ··-·no_reboot_needed | 485 | ··-·no_reboot_needed |
| 488 | ··-·package_aide_installed | 486 | ··-·package_aide_installed |
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 494 | package·--add=aide | ||
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 496 | [[packages]] | ||
| 497 | name·=·"aide" | ||
| 498 | version·=·"*" | ||
| 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 504 | include·install_aide | 492 | include·install_aide |
| 505 | class·install_aide·{ | 493 | class·install_aide·{ |
| 506 | ··package·{·'aide': | 494 | ··package·{·'aide': |
| 507 | ····ensure·=>·'installed', | 495 | ····ensure·=>·'installed', |
| 508 | ··} | 496 | ··} |
| 509 | } | 497 | } |
| 498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 503 | package·install·aide | ||
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 509 | package·--add=aide | ||
| 510 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 510 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 511 | Run·the·following·command·to·generate·a·new·database: | 511 | Run·the·following·command·to·generate·a·new·database: |
| 512 | $·sudo·/usr/sbin/aide·--init | 512 | $·sudo·/usr/sbin/aide·--init |
| 513 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 513 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 514 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 514 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 515 | To·initiate·a·manual·check,·run·the·following·command: | 515 | To·initiate·a·manual·check,·run·the·following·command: |
| 516 | $·sudo·/usr/sbin/aide·--check | 516 | $·sudo·/usr/sbin/aide·--check |
| Offset 839, 39 lines modified | Offset 839, 14 lines modified | ||
| 839 | » echo·"to·see·what·package·to·(re)install"·>&2 | 839 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 840 | » false··#·end·with·an·error·code | 840 | » false··#·end·with·an·error·code |
| 841 | elif·test·"$rc"·!=·0;·then | 841 | elif·test·"$rc"·!=·0;·then |
| 842 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 842 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 843 | » false··#·end·with·an·error·code | 843 | » false··#·end·with·an·error·code |
| 844 | fi | 844 | fi |
| 845 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 846 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 847 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 848 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 849 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 850 | --- | ||
| 851 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 852 | kind:·MachineConfig | ||
| 853 | spec: | ||
| 854 | ··config: | ||
| 855 | ····ignition: | ||
| 856 | ······version:·3.1.0 | ||
| 857 | ····systemd: | ||
| 858 | ······units: | ||
| 859 | ········-·name:·configure-crypto-policy.service | ||
| 860 | ··········enabled:·true | ||
| 861 | ··········contents:·| | ||
| 862 | ············[Unit] | ||
| 863 | ············Before=kubelet.service | ||
| 864 | ············[Service] | ||
| 865 | ············Type=oneshot | ||
| 866 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 867 | ············RemainAfterExit=yes | ||
| 868 | ············[Install] | ||
| 869 | ············WantedBy=multi-user.target | ||
| 870 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 845 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 233342/238899 bytes (97.67%) of diff not shown. | |||
| Offset 14446, 15 lines modified | Offset 14446, 15 lines modified | ||
| 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038740:·206f·6620·3230·323 | 00038740:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | ||
| 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bba0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bbb0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bbc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bbd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bbe0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bbf0:·6964·6d37·3938·3022·3e3c·7072·653e·3c63··idm7980"><pre><c | |||
| 0003bc00:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003bc10:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bc20:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bc30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bc40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bc60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bc70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bc80:·2369·646d·3739·3831·2220·7461·6269·6e64··#idm7981"·tabind | |||
| 0003bc90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bcb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bcc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bcd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bce0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b | 0003bcf0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b | 0003bd00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003bd10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003bd20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003bd30:·3739·3831·223e·3c74·6162·6c65·2063·6c61··7981"><table·cla | ||
| 0003b | 0003bd40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003bd50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003bd60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003bd70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003bd80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003bd90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003bda0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003bdb0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003bdc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003bdd0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b | 0003bde0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b | 0003bdf0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b | 0003be00:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b | 0003be10:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b | 0003be20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0003bce0:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 0003b | 0003be30:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003be40:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003be50:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003be60:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003be70:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003be80:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003be90:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003bea0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003beb0:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003bec0:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003bed0:·7975·6d20·696e·7374·616c·6c20·2d79·2022··yum·install·-y·" | |||
| 0003bee0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003bef0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003bf00:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003bf10:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003bf20:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003bf30:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b | 0003bf40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003bf50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003bf60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003bf70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003bd4 | 0003bf80:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | ||
| 0003b | 0003bf90:·3832·2220·7461·6269·6e64·6578·3d22·3022··82"·tabindex="0" | ||
| 0003b | 0003bfa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003bfb0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b | 0003bfc0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003bfd0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003bfe0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bdb0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bdc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bdd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bde0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bdf0:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 0003be00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003be10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003be20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003be30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b | 0003bff0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003c000:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c010:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c020:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c030:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003c040:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003c050:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c060:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c070:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c080:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c090:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c0a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c0b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003 | 0003c0c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003be60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003be70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003be80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003be90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bea0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003 | 0003c0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bec0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bed0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bee0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bef0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003bf00:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| Max diff block lines reached; 3760264/3792610 bytes (99.15%) of diff not shown. | |||
| Offset 54, 15 lines modified | Offset 54, 15 lines modified | ||
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 59 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 59 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 60 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 60 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 61 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 61 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 62 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 63 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 63 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 64 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 64 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 65 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 65 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 66 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 21 lines modified | Offset 119, 19 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············5.3.1 | 123 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package | 127 | [[packages]] |
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 135 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 38 lines modified | Offset 162, 40 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 164 | ··-·low_complexity |
| 167 | ··-·low_disruption | 165 | ··-·low_disruption |
| 168 | ··-·medium_severity | 166 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | 174 | include·install_aide |
| 187 | class·install_aide·{ | 175 | class·install_aide·{ |
| 188 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 189 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 190 | ··} | 178 | ··} |
| 191 | } | 179 | } |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | package·install·aide | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 1784, 14 lines modified | Offset 1784, 18 lines modified | ||
| 1784 | ·············_\x8i_\x8s_\x8m······1446 | 1784 | ·············_\x8i_\x8s_\x8m······1446 |
| 1785 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1785 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1786 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1786 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1787 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1787 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1788 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1788 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1789 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 1789 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 1790 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1790 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1792 | [customizations] | ||
| 1793 | fips·=·true | ||
| 1791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1792 | #·Remediation·is·applicable·only·in·certain·platforms | 1795 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1793 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1796 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1794 | var_system_crypto_policy='FIPS' | 1797 | var_system_crypto_policy='FIPS' |
| Offset 1922, 18 lines modified | Offset 1926, 14 lines modified | ||
| 1922 | ··-·NIST-800-53-SC-13 | 1926 | ··-·NIST-800-53-SC-13 |
| 1923 | ··-·enable_fips_mode | 1927 | ··-·enable_fips_mode |
| 1924 | ··-·high_severity | 1928 | ··-·high_severity |
| 1925 | ··-·medium_complexity | 1929 | ··-·medium_complexity |
| 1926 | ··-·medium_disruption | 1930 | ··-·medium_disruption |
| 1927 | ··-·reboot_required | 1931 | ··-·reboot_required |
| 1928 | ··-·restrict_strategy | 1932 | ··-·restrict_strategy |
| 1929 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1930 | [customizations] | ||
| 1931 | fips·=·true | ||
| 1932 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1933 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1933 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1934 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1934 | fips-mode-setup·--enable | 1935 | fips-mode-setup·--enable |
| Max diff block lines reached; 406191/412607 bytes (98.45%) of diff not shown. | |||
| Offset 14470, 16 lines modified | Offset 14470, 16 lines modified | ||
| 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000388c0:·2028·6173·206f·6620·3230·323 | 000388c0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 000388d0:·323 | 000388d0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15303, 236 lines modified | Offset 15303, 236 lines modified | ||
| 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bcd0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003bce0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bcf0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bd00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bd10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bd20:·2269·646d·3739·3830·223e·3c70·7265·3e3c··"idm7980"><pre>< | |||
| 0003bd30:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003bd40:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003bd50:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003bd60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bd70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bd80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bd90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bda0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bdb0:·2223·6964·6d37·3938·3122·2074·6162·696e··"#idm7981"·tabin | |||
| 0003bdc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bdd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bde0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bdf0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003be00:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003be10:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b | 0003be20:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b | 0003be30:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003be40:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003be50:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003be60:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | ||
| 0003b | 0003be70:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003be80:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003be90:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003bea0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003beb0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003bec0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003bed0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003bee0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003bef0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003bf00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003bf10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003bf20:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003bf30:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003bf40:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003bf50:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003be10:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003be20:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003be30:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003be40:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003be50:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003be60:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003be70:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003be80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003be90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bea0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003beb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bec0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bed0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bee0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003bef0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bf | 0003bf60:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003bf70:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003bf80:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003bf90:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003bfa0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003bfb0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003bfc0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003bfd0:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003bfe0:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003bff0:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003c000:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 0003c010:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003c020:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003c030:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003c040:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003c050:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003c060:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003c070:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c080:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c090:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003 | 0003c0a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003bf20:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 0003bf30:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bf40:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bf50:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bf60:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003 | 0003c0b0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003c0c0:·3938·3222·2074·6162·696e·6465·783d·2230··982"·tabindex="0 | |||
| 0003c0d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c0e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c0f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c100:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c110:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c120:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003c130:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c140:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c150:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c160:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003c170:·3832·223e·3c74·6162·6c65·2063·6c61·7373··82"><table·class | |||
| 0003c180:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c190:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c1a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c1b0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c1c0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c1d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c1e0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003 | 0003c1f0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| Max diff block lines reached; 3704937/3737421 bytes (99.13%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 124, 21 lines modified | Offset 124, 19 lines modified | ||
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 126 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8c_\x8i_\x8s············5.3.1 | 128 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 129 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package | 132 | [[packages]] |
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | 140 | #·Remediation·is·applicable·only·in·certain·platforms |
| 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 38 lines modified | Offset 167, 40 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 169 | ··-·low_complexity |
| 172 | ··-·low_disruption | 170 | ··-·low_disruption |
| 173 | ··-·medium_severity | 171 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | [[packages]] | ||
| 184 | name·=·"aide" | ||
| 185 | version·=·"*" | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | include·install_aide | 179 | include·install_aide |
| 192 | class·install_aide·{ | 180 | class·install_aide·{ |
| 193 | ··package·{·'aide': | 181 | ··package·{·'aide': |
| 194 | ····ensure·=>·'installed', | 182 | ····ensure·=>·'installed', |
| 195 | ··} | 183 | ··} |
| 196 | } | 184 | } |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·install·aide | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=aide | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 202 | To·initiate·a·manual·check,·run·the·following·command: | 202 | To·initiate·a·manual·check,·run·the·following·command: |
| 203 | $·sudo·/usr/sbin/aide·--check | 203 | $·sudo·/usr/sbin/aide·--check |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ·············_\x8i_\x8s_\x8m······1446 | 1789 | ·············_\x8i_\x8s_\x8m······1446 |
| 1790 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1790 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1791 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1791 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1792 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1792 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1793 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1793 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1794 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 1794 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 1795 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1795 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations] | ||
| 1798 | fips·=·true | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1797 | #·Remediation·is·applicable·only·in·certain·platforms | 1800 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1798 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1801 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1799 | var_system_crypto_policy='FIPS' | 1802 | var_system_crypto_policy='FIPS' |
| Offset 1927, 18 lines modified | Offset 1931, 14 lines modified | ||
| 1927 | ··-·NIST-800-53-SC-13 | 1931 | ··-·NIST-800-53-SC-13 |
| 1928 | ··-·enable_fips_mode | 1932 | ··-·enable_fips_mode |
| 1929 | ··-·high_severity | 1933 | ··-·high_severity |
| 1930 | ··-·medium_complexity | 1934 | ··-·medium_complexity |
| 1931 | ··-·medium_disruption | 1935 | ··-·medium_disruption |
| 1932 | ··-·reboot_required | 1936 | ··-·reboot_required |
| 1933 | ··-·restrict_strategy | 1937 | ··-·restrict_strategy |
| 1934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1935 | [customizations] | ||
| 1936 | fips·=·true | ||
| 1937 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1938 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1938 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 1939 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 1939 | fips-mode-setup·--enable | 1940 | fips-mode-setup·--enable |
| Max diff block lines reached; 400939/407355 bytes (98.42%) of diff not shown. | |||
| Offset 14316, 16 lines modified | Offset 14316, 16 lines modified | ||
| 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f20:·2861·7320·6f66·2032·3032·3 | 00037f20:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037f30:·3 | 00037f30:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15108, 237 lines modified | Offset 15108, 237 lines modified | ||
| 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b0a0:·656d·6564·6961·7469·6f6e·20 | 0003b0a0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b0b0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b0c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b0d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b0e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b0f0:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b0b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0e0:·2220·6964·3d22·6964·6d38·3430·3622·3e3c··"·id="idm8406">< | |||
| 0003b0f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b100:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b110:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b120:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b130:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b140:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b150:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b160:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b170:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b180:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b190:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b1a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b1c0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b1d0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b1e0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b1f0:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003b200:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b210:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b220:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b230:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b240:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b250:·6964·6d38·3430·3722·2074·6162·696e·6465··idm8407"·tabinde | |||
| 0003b260:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b270:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b280:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b290:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b2a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b2b0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b2c0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b2d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b2e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b2f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b300:·3430·3722·3e3c·7461·626c·6520·636c·6173··407"><table·clas | |||
| 0003b310:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b320:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b330:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b340:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b350:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b360:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b370:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b380:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b390:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b3a0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b3b0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b3c0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b3d0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b3e0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b100:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b110:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b120:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b130:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b400:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b410:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b420:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b430:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b440:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b450:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b460:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b470:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b480:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b490:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b4a0:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b4b0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b4c0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b4d0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b4e0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b4f0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b500:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b | 0003b140:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b | 0003b150:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b | 0003b160:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b | 0003b170:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b | 0003b180:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b | 0003b190:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b | 0003b1a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b1b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b1c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b1d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b1e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b1f0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b200:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b210:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b220:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b230:·2220·6964·3d22·6964·6d38·3430·3722·3e3c··"·id="idm8407">< | |||
| 0003b240:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b250:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b260:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b270:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b280:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b290:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| Max diff block lines reached; 2783579/2816201 bytes (98.84%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 21 lines modified | Offset 103, 19 lines modified | ||
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | package | 111 | [[packages]] |
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | #·Remediation·is·applicable·only·in·certain·platforms | 119 | #·Remediation·is·applicable·only·in·certain·platforms |
| 122 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 120 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 148, 38 lines modified | Offset 146, 40 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 148 | ··-·low_complexity |
| 151 | ··-·low_disruption | 149 | ··-·low_disruption |
| 152 | ··-·medium_severity | 150 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·--add=aide | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_aide | 158 | include·install_aide |
| 171 | class·install_aide·{ | 159 | class·install_aide·{ |
| 172 | ··package·{·'aide': | 160 | ··package·{·'aide': |
| 173 | ····ensure·=>·'installed', | 161 | ····ensure·=>·'installed', |
| 174 | ··} | 162 | ··} |
| 175 | } | 163 | } |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 181 | To·initiate·a·manual·check,·run·the·following·command: | 181 | To·initiate·a·manual·check,·run·the·following·command: |
| 182 | $·sudo·/usr/sbin/aide·--check | 182 | $·sudo·/usr/sbin/aide·--check |
| Offset 321, 51 lines modified | Offset 321, 51 lines modified | ||
| 321 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 321 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 322 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 322 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 323 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 323 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 324 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 324 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 325 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 325 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 326 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 326 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 329 | [[customizations.filesystem]] | ||
| 330 | mountpoint·=·"/home" | ||
| 331 | size·=·1073741824 | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 329 | logvol·/home·1024 | 333 | logvol·/home·1024 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 335 | part·/home | 339 | part·/home |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 337 | [[customizations.filesystem]] | ||
| 338 | mountpoint·=·"/home" | ||
| 339 | size·=·1073741824 | ||
| 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 342 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 342 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 343 | Severity: ···unknown | 343 | Severity: ···unknown |
| 344 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv | 344 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 345 | Identifiers:·CCE-90846-7 | 345 | Identifiers:·CCE-90846-7 |
| Max diff block lines reached; 222556/229163 bytes (97.12%) of diff not shown. | |||
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·2861·7320·6f66·2032·3032·3 | 00037f10:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037f20:·3 | 00037f20:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15113, 237 lines modified | Offset 15113, 237 lines modified | ||
| 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b100:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b110:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b120:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b130:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b140:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b150:·3430·3622·3e3c·7072·653e·3c63·6f64·653e··406"><pre><code> | |||
| 0003b160:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b170:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b180:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b190:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b1a0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b1b0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1c0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b1d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1e0:·3834·3037·2220·7461·6269·6e64·6578·3d22··8407"·tabindex=" | |||
| 0003b1f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b200:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b210:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b220:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b230:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b240:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b | 0003b250:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b260:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b270:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b280:·7073·6522·2069·643d·2269·646d·3834·3037··pse"·id="idm8407 | ||
| 0003b | 0003b290:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b2a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b | 0003b2b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b2c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b2d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b2e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b2f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b300:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b310:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b320:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b330:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b340:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b350:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b360:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b | 0003b370:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b | 0003b380:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b240:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003b250:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b260:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b270:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b280:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b290:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b2a0:·3d22·2369·646d·3834·3037·2220·7461·6269··="#idm8407"·tabi | |||
| 0003b2b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b2c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b2d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b2e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b | 0003b390:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b3a0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b3b0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b3c0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b3d0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b3e0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b3f0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b400:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b410:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b420:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 0003b430:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b440:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b450:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b | 0003b460:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003b310:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b320:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b330:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b340:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b350:·646d·3834·3037·223e·3c74·6162·6c65·2063··dm8407"><table·c | |||
| 0003b360:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b370:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b380:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b390:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b | 0003b470:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003b480:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b490:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b4b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b4c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b4d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b4e0:·7267·6574·3d22·2369·646d·3834·3038·2220··rget="#idm8408"· | |||
| 0003b4f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b500:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b510:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b520:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b530:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b540:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b550:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b560:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b570:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b580:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b590:·2220·6964·3d22·6964·6d38·3430·3822·3e3c··"·id="idm8408">< | |||
| 0003b5a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b5c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b5d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b610:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| Max diff block lines reached; 2877255/2909877 bytes (98.88%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 104, 21 lines modified | Offset 104, 19 lines modified | ||
| 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 107 | ·············_\x8c_\x8i_\x8s············6.1.1 | 107 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package | 112 | [[packages]] |
| 113 | name·=·"aide" | ||
| 114 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 122 | #·Remediation·is·applicable·only·in·certain·platforms | 120 | #·Remediation·is·applicable·only·in·certain·platforms |
| 123 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 121 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 149, 38 lines modified | Offset 147, 40 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 149 | ··-·low_complexity |
| 152 | ··-·low_disruption | 150 | ··-·low_disruption |
| 153 | ··-·medium_severity | 151 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | include·install_aide | 159 | include·install_aide |
| 172 | class·install_aide·{ | 160 | class·install_aide·{ |
| 173 | ··package·{·'aide': | 161 | ··package·{·'aide': |
| 174 | ····ensure·=>·'installed', | 162 | ····ensure·=>·'installed', |
| 175 | ··} | 163 | ··} |
| 176 | } | 164 | } |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·install·aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·/usr/sbin/aide·--init | 179 | $·sudo·/usr/sbin/aide·--init |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 182 | To·initiate·a·manual·check,·run·the·following·command: | 182 | To·initiate·a·manual·check,·run·the·following·command: |
| 183 | $·sudo·/usr/sbin/aide·--check | 183 | $·sudo·/usr/sbin/aide·--check |
| Offset 826, 51 lines modified | Offset 826, 51 lines modified | ||
| 826 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 826 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 827 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 827 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 828 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 828 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 829 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 829 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 830 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 830 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 831 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 831 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 832 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 832 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 834 | [[customizations.filesystem]] | ||
| 835 | mountpoint·=·"/home" | ||
| 836 | size·=·1073741824 | ||
| 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 834 | logvol·/home·1024 | 838 | logvol·/home·1024 |
| 835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 840 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 841 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 842 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 843 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 840 | part·/home | 844 | part·/home |
| 841 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 842 | [[customizations.filesystem]] | ||
| 843 | mountpoint·=·"/home" | ||
| 844 | size·=·1073741824 | ||
| 845 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 845 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 846 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 846 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 847 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 847 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| 848 | Severity: ···unknown | 848 | Severity: ···unknown |
| 849 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv | 849 | Rule·ID:·····xccdf_org.ssgproject.content_rule_partition_for_srv |
| 850 | Identifiers:·CCE-90846-7 | 850 | Identifiers:·CCE-90846-7 |
| Max diff block lines reached; 230943/237497 bytes (97.24%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·362d·3031·2d32··(as·of·2026-01-2 | ||
| 00037f40:·3 | 00037f40:·3829·0a20·2020·2020·2020·2020·2020·2020··8).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15104, 236 lines modified | Offset 15104, 236 lines modified | ||
| 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | ||
| 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b060:·6469·6174·696f·6e20· | 0003b060:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b070:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b080:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b090:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0b0:·2220·6964·3d22·6964·6d38·3430·3622·3e3c··"·id="idm8406">< | |||
| 0003b0c0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b0d0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0e0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b070:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b080:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b090:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b0a0:·643d·2269·646d·3834·3036·223e·3c74·6162··d="idm8406"><tab | |||
| 0003b0b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b0c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b0d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b0e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b0f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b100:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b120:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b130:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b140:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b150:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b160:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b170:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b180:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b190:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b1a0:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 0003b1b0:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 0003b1c0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b1d0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b1e0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1f0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b200:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b210:·3834·3037·2220·7461·6269·6e64·6578·3d22··8407"·tabindex=" | |||
| 0003b220:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b230:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b240:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b250:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b260:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b270:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b280:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b290:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2b0:·7073·6522·2069·643d·2269·646d·3834·3037··pse"·id="idm8407 | |||
| 0003b2c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b2d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b2e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b2f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b300:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b310:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b320:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b330:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b340:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b350:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b360:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b370:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b380:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b390:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b3a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b3b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b3c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b3d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b3e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b3f0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b400:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b410:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b420:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b430:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b440:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b450:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 0003b460:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b470:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b480:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b490:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b4a0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b4b0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b | 0003b0f0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b100:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b110:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b120:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b130:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003b140:·7267·6574·3d22·2369·646d·3834·3037·2220··rget="#idm8407"· | ||
| 0003b | 0003b150:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b160:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b | 0003b170:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b | 0003b180:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b190:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b1a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1b0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b1c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b1f0:·643d·2269·646d·3834·3037·223e·3c74·6162··d="idm8407"><tab | |||
| 0003b200:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b210:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b220:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b230:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b240:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b250:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b260:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b270:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| Max diff block lines reached; 1612074/1644558 bytes (98.02%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 21 lines modified | Offset 119, 19 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package | 127 | [[packages]] |
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 135 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 38 lines modified | Offset 162, 40 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 164 | ··-·low_complexity |
| 167 | ··-·low_disruption | 165 | ··-·low_disruption |
| 168 | ··-·medium_severity | 166 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | 174 | include·install_aide |
| 187 | class·install_aide·{ | 175 | class·install_aide·{ |
| 188 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 189 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 190 | ··} | 178 | ··} |
| 191 | } | 179 | } |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | package·install·aide | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 360, 57 lines modified | Offset 360, 57 lines modified | ||
| 360 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 360 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 361 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 361 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 362 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 362 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 363 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 363 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 364 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 364 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 365 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 365 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 368 | [[customizations.filesystem]] | ||
| 369 | mountpoint·=·"/home" | ||
| 370 | size·=·1073741824 | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 368 | logvol·/home·1024 | 372 | logvol·/home·1024 |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 374 | part·/home | 378 | part·/home |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 376 | [[customizations.filesystem]] | ||
| 377 | mountpoint·=·"/home" | ||
| 378 | size·=·1073741824 | ||
| 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| 382 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the | 382 | as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the |
| 383 | mountpoint·can·instead·be·configured·later. | 383 | mountpoint·can·instead·be·configured·later. |
| 384 | ·············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is | 384 | ·············Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is |
| Max diff block lines reached; 146952/153219 bytes (95.91%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037f20:·6f66·2032·3032·3 | 00037f20:·6f66·2032·3032·362d·3031·2d32·3829·0a20··of·2026-01-28).· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14766, 218 lines modified | Offset 14766, 218 lines modified | ||
| 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | ||
| 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039b40:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 00039b50:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039b40:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 00039b50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00039b60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00039b70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00039b80:·646d·3132·3735·3922·3e3c·7461·626c·6520··dm12759"><table· | |||
| 00039b90:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039ba0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039bb0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039bc0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039bd0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039be0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039bf0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c00:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039c10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039c20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039c30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039c40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039c50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00039c60:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00039c70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00039c80:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 00039c90:·6c20·646e·662d·6175·746f·6d61·7469·630a··l·dnf-automatic. | |||
| 00039ca0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00039cb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00039cc0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00039cd0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00039ce0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00039cf0:·3d22·2369·646d·3132·3736·3022·2074·6162··="#idm12760"·tab | |||
| 00039d00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039d10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039d20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039d30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039d40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039d50:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039d60:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039 | 00039b60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 00039 | 00039b70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 00039 | 00039b80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 00039da0:·6964·6d31·3237·3630·223e·3c74·6162·6c65··idm12760"><table | |||
| 00039db0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00039dc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00039dd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00039de0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00039df0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00039e00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039e10:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00039e20:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00039e30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039e40:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00039e50:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00039e60:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00039 | 00039b90:·3d22·6964·6d31·3237·3539·223e·3c70·7265··="idm12759"><pre | ||
| 00039ba0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00039bb0:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | |||
| 00039bc0:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | |||
| 00039bd0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00039be0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039bf0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039c00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039c10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039c20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039c30:·3132·3736·3022·2074·6162·696e·6465·783d··12760"·tabindex= | |||
| 00039c40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00039c50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00039c60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00039c70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00039c80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00039c90:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 00039ca0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 00039cb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00039cc0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00039cd0:·6170·7365·2220·6964·3d22·6964·6d31·3237··apse"·id="idm127 | |||
| 00039ce0:·3630·223e·3c74·6162·6c65·2063·6c61·7373··60"><table·class | |||
| 00039cf0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039d00:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039d10:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039d20:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039d30:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039d40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039d50:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039d60:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039d70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039d80:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039 | 00039d90:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 00039e90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00039ea0:·653e·0a69·6620·2120·7270·6d20·2d71·202d··e>.if·!·rpm·-q·- | |||
| 00039eb0:·2d71·7569·6574·2022·646e·662d·6175·746f··-quiet·"dnf-auto | |||
| 00039ec0:·6d61·7469·6322·203b·2074·6865·6e0a·2020··matic"·;·then.·· | |||
| 00039 | 00039da0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 00039db0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00039dc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00039dd0:·3e3c·7072·653e·3c63·6f64·653e·0a69·6620··><pre><code>.if· | |||
| 00039de0:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 00039 | 00039df0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | ||
| 00039e00:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 00039e10:·696e·7374·616c·6c20·2d79·2022·646e·662d··install·-y·"dnf- | |||
| 00039e20:·6175·746f·6d61·7469·6322·0a66·690a·3c2f··automatic".fi.</ | |||
| 00039e30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00039e40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00039e50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00039e60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039e70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| Max diff block lines reached; 372136/401998 bytes (92.57%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 83, 21 lines modified | Offset 83, 19 lines modified | ||
| 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 95 | package | 91 | [[packages]] |
| 92 | name·=·"dnf-automatic" | ||
| 93 | version·=·"*" | ||
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 101 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 99 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 116, 38 lines modified | Offset 114, 40 lines modified | ||
| 116 | ··-·CCE-83454-9 | 114 | ··-·CCE-83454-9 |
| 117 | ··-·enable_strategy | 115 | ··-·enable_strategy |
| 118 | ··-·low_complexity | 116 | ··-·low_complexity |
| 119 | ··-·low_disruption | 117 | ··-·low_disruption |
| 120 | ··-·medium_severity | 118 | ··-·medium_severity |
| 121 | ··-·no_reboot_needed | 119 | ··-·no_reboot_needed |
| 122 | ··-·package_dnf-automatic_installed | 120 | ··-·package_dnf-automatic_installed |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·--add=dnf-automatic | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | include·install_dnf-automatic | 126 | include·install_dnf-automatic |
| 139 | class·install_dnf-automatic·{ | 127 | class·install_dnf-automatic·{ |
| 140 | ··package·{·'dnf-automatic': | 128 | ··package·{·'dnf-automatic': |
| 141 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 142 | ··} | 130 | ··} |
| 143 | } | 131 | } |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·install·dnf-automatic | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·--add=dnf-automatic | ||
| 144 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 144 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 145 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 145 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 146 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 146 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 147 | automatic.conf. | 147 | automatic.conf. |
| 148 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 148 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 149 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 149 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 150 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 150 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9608, 21 lines modified | Offset 9608, 14 lines modified | ||
| 9608 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9608 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9609 | ····························A.9.1.2 | 9609 | ····························A.9.1.2 |
| 9610 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9610 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9611 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9611 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9612 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9612 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9613 | ·············_\x8c_\x8i_\x8s············2.1.3 | 9613 | ·············_\x8c_\x8i_\x8s············2.1.3 |
| 9614 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9614 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9620 | package·remove·dhcp-server | ||
| 9621 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9622 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9623 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9624 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9625 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9626 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server | 9620 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server |
| Offset 9653, 33 lines modified | Offset 9646, 40 lines modified | ||
| 9653 | ··-·PCI-DSSv4-2.2.4 | 9646 | ··-·PCI-DSSv4-2.2.4 |
| 9654 | ··-·disable_strategy | 9647 | ··-·disable_strategy |
| 9655 | ··-·low_complexity | 9648 | ··-·low_complexity |
| 9656 | ··-·low_disruption | 9649 | ··-·low_disruption |
| 9657 | ··-·medium_severity | 9650 | ··-·medium_severity |
| 9658 | ··-·no_reboot_needed | 9651 | ··-·no_reboot_needed |
| 9659 | ··-·package_dhcp_removed | 9652 | ··-·package_dhcp_removed |
| 9660 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9661 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9662 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9663 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 34789/40665 bytes (85.55%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2028·6173·206f·6620·3230·3236·2d30·····(as·of·2026-0 | ||
| 00037e50:·3 | 00037e50:·312d·3238·290a·2020·2020·2020·2020·2020··1-28).·········· | ||
| 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15231, 190 lines modified | Offset 15231, 190 lines modified | ||
| 0003b7e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b7e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b7f0:·743d·2223·6964·6d39·3230·3222·2074·6162··t="#idm9202"·tab | 0003b7f0:·743d·2223·6964·6d39·3230·3222·2074·6162··t="#idm9202"·tab | ||
| 0003b800:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b800:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b810:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b810:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b820:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b820:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b830:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b830:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b840:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b840:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b850:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b850:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b860:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b870:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b880:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b890:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b8a0:·643d·2269·646d·3932·3032·223e·3c74·6162··d="idm9202"><tab | |||
| 0003b8b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b8c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b8d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b8f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b860:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003b870:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b880:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b890:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b8a0:·2220·6964·3d22·6964·6d39·3230·3222·3e3c··"·id="idm9202">< | |||
| 0003b8b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b8c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b8d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b8e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b8f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b900:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b910:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b920:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b9 | 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b940:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b9 | 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b920:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b930:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b940:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b950:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b960:· | 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b970:· | 0003b970:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b980:· | 0003b980:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b990:· | 0003b990:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b9a0:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003b9b0:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003b9c0:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003b9d0:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003b9e0:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003b9f0:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003ba00:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003ba10:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003ba20:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003ba30:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003ba40:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003ba50:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003ba60:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003ba70:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003ba80:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003ba90:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 0003baa0:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 0003bab0:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 0003bac0:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 0003bad0:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 0003bae0:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 0003baf0:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 0003bb00:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 0003bb10:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 0003bb20:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003bb30:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 0003bb40:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | |||
| 0003bb50:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 0003bb60:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 0003bb70:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 0003bb80:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 0003bb90:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 0003bba0:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 0003bbb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bbc0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bbd0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bbe0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bbf0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bc00:·2223·6964·6d39·3230·3322·2074·6162·696e··"#idm9203"·tabin | |||
| 0003bc10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bc20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bc30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bc40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bc50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bc60:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003bc70:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bc80:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bc90:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bca0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bcb0:·2269·646d·3932·3033·223e·3c74·6162·6c65··"idm9203"><table | |||
| 0003bcc0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bcd0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bce0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bcf0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd00:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd20:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bd30:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bd40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bd50:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bd60:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bd70:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bd80:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003bd90:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003bda0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b | 0003b9a0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003b | 0003b9b0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003b | 0003b9c0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| Max diff block lines reached; 1546909/1573045 bytes (98.34%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Advanced | 43 | ··············Linux·9·-·Advanced |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 123, 39 lines modified | Offset 123, 14 lines modified | ||
| 123 | » echo·"to·see·what·package·to·(re)install"·>&2 | 123 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 124 | » false··#·end·with·an·error·code | 124 | » false··#·end·with·an·error·code |
| 125 | elif·test·"$rc"·!=·0;·then | 125 | elif·test·"$rc"·!=·0;·then |
| 126 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 126 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 127 | » false··#·end·with·an·error·code | 127 | » false··#·end·with·an·error·code |
| 128 | fi | 128 | fi |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 134 | --- | ||
| 135 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 136 | kind:·MachineConfig | ||
| 137 | spec: | ||
| 138 | ··config: | ||
| 139 | ····ignition: | ||
| 140 | ······version:·3.1.0 | ||
| 141 | ····systemd: | ||
| 142 | ······units: | ||
| 143 | ········-·name:·configure-crypto-policy.service | ||
| 144 | ··········enabled:·true | ||
| 145 | ··········contents:·| | ||
| 146 | ············[Unit] | ||
| 147 | ············Before=kubelet.service | ||
| 148 | ············[Service] | ||
| 149 | ············Type=oneshot | ||
| 150 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 151 | ············RemainAfterExit=yes | ||
| 152 | ············[Install] | ||
| 153 | ············WantedBy=multi-user.target | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 159 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 134 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 160 | ··set_fact: | 135 | ··set_fact: |
| Offset 206, 14 lines modified | Offset 181, 39 lines modified | ||
| 206 | ··-·PCI-DSSv4-2.2.7 | 181 | ··-·PCI-DSSv4-2.2.7 |
| 207 | ··-·configure_crypto_policy | 182 | ··-·configure_crypto_policy |
| 208 | ··-·high_severity | 183 | ··-·high_severity |
| 209 | ··-·low_complexity | 184 | ··-·low_complexity |
| 210 | ··-·low_disruption | 185 | ··-·low_disruption |
| 211 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 212 | ··-·restrict_strategy | 187 | ··-·restrict_strategy |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 193 | --- | ||
| 194 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 195 | kind:·MachineConfig | ||
| 196 | spec: | ||
| 197 | ··config: | ||
| 198 | ····ignition: | ||
| 199 | ······version:·3.1.0 | ||
| 200 | ····systemd: | ||
| 201 | ······units: | ||
| 202 | ········-·name:·configure-crypto-policy.service | ||
| 203 | ··········enabled:·true | ||
| 204 | ··········contents:·| | ||
| 205 | ············[Unit] | ||
| 206 | ············Before=kubelet.service | ||
| 207 | ············[Service] | ||
| 208 | ············Type=oneshot | ||
| 209 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 210 | ············RemainAfterExit=yes | ||
| 211 | ············[Install] | ||
| 212 | ············WantedBy=multi-user.target | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 216 | Severity: ···medium | 216 | Severity: ···medium |
| 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 218 | Identifiers:·CCE-83445-7 | 218 | Identifiers:·CCE-83445-7 |
| 219 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 219 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1776, 21 lines modified | Offset 1776, 19 lines modified | ||
| 1776 | $·sudo·dnf·install·cryptsetup | 1776 | $·sudo·dnf·install·cryptsetup |
| 1777 | Rationale:···LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. | 1777 | Rationale:···LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. |
| 1778 | Severity: ···medium | 1778 | Severity: ···medium |
| 1779 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed | 1779 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed |
| 1780 | Identifiers:·CCE-86612-9 | 1780 | Identifiers:·CCE-86612-9 |
| 1781 | References:··_\x8c_\x8c_\x8n·····A.25.SEC-RHEL1 | 1781 | References:··_\x8c_\x8c_\x8n·····A.25.SEC-RHEL1 |
| 1782 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 | 1782 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 |
| 1783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1784 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1785 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1786 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1787 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1788 | package | 1784 | [[packages]] |
| 1785 | name·=·"cryptsetup" | ||
| 1786 | version·=·"*" | ||
| 1789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1790 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1788 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1791 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1789 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1792 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1790 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1793 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1791 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1794 | if·!·rpm·-q·--quiet·"cryptsetup"·;·then | 1792 | if·!·rpm·-q·--quiet·"cryptsetup"·;·then |
| Offset 1810, 38 lines modified | Offset 1808, 40 lines modified | ||
| 1810 | ··-·PCI-DSSv4-3.5.1.2 | 1808 | ··-·PCI-DSSv4-3.5.1.2 |
| 1811 | ··-·enable_strategy | 1809 | ··-·enable_strategy |
| 1812 | ··-·low_complexity | 1810 | ··-·low_complexity |
| 1813 | ··-·low_disruption | 1811 | ··-·low_disruption |
| 1814 | ··-·medium_severity | 1812 | ··-·medium_severity |
| 1815 | ··-·no_reboot_needed | 1813 | ··-·no_reboot_needed |
| Max diff block lines reached; 136758/142742 bytes (95.81%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e40:·323 | 00037e40:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15192, 189 lines modified | Offset 15192, 189 lines modified | ||
| 0003b570:·6574·3d22·2369·646d·3932·3032·2220·7461··et="#idm9202"·ta | 0003b570:·6574·3d22·2369·646d·3932·3032·2220·7461··et="#idm9202"·ta | ||
| 0003b580:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b580:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b590:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b590:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b5a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b5a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b5b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b5b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b5c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b5c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b5d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b5d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b5e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d39·3230·3222·3e3c·7461··id="idm9202"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b5e0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0003b5f0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b600:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b610:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b620:·6522·2069·643d·2269·646d·3932·3032·223e··e"·id="idm9202"> | |||
| 0003b630:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b640:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b650:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b660:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b670:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b680:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b690:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b6a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b6 | 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b6 | 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b6 | 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b6e0:· | 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b6f0:· | 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b700:· | 0003b700:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b710:· | 0003b710:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b720:·7265·3e3c·636f·6465·3e2d·2d2d·0a61·7069··re><code>---.api | |||
| 0003b730:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 0003b740:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 0003b750:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 0003b760:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 0003b770:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 0003b780:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| 0003b790:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | |||
| 0003b7a0:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | |||
| 0003b7b0:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | |||
| 0003b7c0:·2020·2020·2020·202d·206e·616d·653a·2063·········-·name:·c | |||
| 0003b7d0:·6f6e·6669·6775·7265·2d63·7279·7074·6f2d··onfigure-crypto- | |||
| 0003b7e0:·706f·6c69·6379·2e73·6572·7669·6365·0a20··policy.service.· | |||
| 0003b7f0:·2020·2020·2020·2020·2065·6e61·626c·6564···········enabled | |||
| 0003b800:·3a20·7472·7565·0a20·2020·2020·2020·2020··:·true.········· | |||
| 0003b810:·2063·6f6e·7465·6e74·733a·207c·0a20·2020···contents:·|.··· | |||
| 0003b820:·2020·2020·2020·2020·205b·556e·6974·5d0a···········[Unit]. | |||
| 0003b830:·2020·2020·2020·2020·2020·2020·4265·666f··············Befo | |||
| 0003b840:·7265·3d6b·7562·656c·6574·2e73·6572·7669··re=kubelet.servi | |||
| 0003b850:·6365·0a20·2020·2020·2020·2020·2020·205b··ce.············[ | |||
| 0003b860:·5365·7276·6963·655d·0a20·2020·2020·2020··Service].······· | |||
| 0003b870:·2020·2020·2054·7970·653d·6f6e·6573·686f·······Type=onesho | |||
| 0003b880:·740a·2020·2020·2020·2020·2020·2020·4578··t.············Ex | |||
| 0003b890:·6563·5374·6172·743d·7570·6461·7465·2d63··ecStart=update-c | |||
| 0003b8a0:·7279·7074·6f2d·706f·6c69·6369·6573·202d··rypto-policies·- | |||
| 0003b8b0:·2d73·6574·207b·7b2e·7661·725f·7379·7374··-set·{{.var_syst | |||
| 0003b8c0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b8d0:·7d7d·0a20·2020·2020·2020·2020·2020·2052··}}.············R | |||
| 0003b8e0:·656d·6169·6e41·6674·6572·4578·6974·3d79··emainAfterExit=y | |||
| 0003b8f0:·6573·0a20·2020·2020·2020·2020·2020·205b··es.············[ | |||
| 0003b900:·496e·7374·616c·6c5d·0a20·2020·2020·2020··Install].······· | |||
| 0003b910:·2020·2020·2057·616e·7465·6442·793d·6d75·······WantedBy=mu | |||
| 0003b920:·6c74·692d·7573·6572·2e74·6172·6765·740a··lti-user.target. | |||
| 0003b930:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b940:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b950:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b960:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b970:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b980:·3d22·2369·646d·3932·3033·2220·7461·6269··="#idm9203"·tabi | |||
| 0003b990:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b9a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b9b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b9c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b9d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b9e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b9f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ba00:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ba10:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ba20:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ba30:·3d22·6964·6d39·3230·3322·3e3c·7461·626c··="idm9203"><tabl | |||
| 0003ba40:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ba50:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ba60:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ba70:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ba80:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ba90:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003baa0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bab0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bac0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bad0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bae0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003baf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bb00:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bb10:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003bb20:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b | 0003b720:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | ||
| 0003b | 0003b730:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | ||
| 0003b | 0003b740:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 0003b | 0003b750:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 0003b | 0003b760:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| 0003b | 0003b770:·6661·6374·3a0a·2020·2020·7661·725f·7379··fact:.····var_sy | ||
| Max diff block lines reached; 1166396/1192256 bytes (97.83%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Basic | 43 | ··············Linux·9·-·Basic |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 39 lines modified | Offset 115, 14 lines modified | ||
| 115 | » echo·"to·see·what·package·to·(re)install"·>&2 | 115 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 116 | » false··#·end·with·an·error·code | 116 | » false··#·end·with·an·error·code |
| 117 | elif·test·"$rc"·!=·0;·then | 117 | elif·test·"$rc"·!=·0;·then |
| 118 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 118 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 119 | » false··#·end·with·an·error·code | 119 | » false··#·end·with·an·error·code |
| 120 | fi | 120 | fi |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 126 | --- | ||
| 127 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 128 | kind:·MachineConfig | ||
| 129 | spec: | ||
| 130 | ··config: | ||
| 131 | ····ignition: | ||
| 132 | ······version:·3.1.0 | ||
| 133 | ····systemd: | ||
| 134 | ······units: | ||
| 135 | ········-·name:·configure-crypto-policy.service | ||
| 136 | ··········enabled:·true | ||
| 137 | ··········contents:·| | ||
| 138 | ············[Unit] | ||
| 139 | ············Before=kubelet.service | ||
| 140 | ············[Service] | ||
| 141 | ············Type=oneshot | ||
| 142 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 143 | ············RemainAfterExit=yes | ||
| 144 | ············[Install] | ||
| 145 | ············WantedBy=multi-user.target | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 126 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 152 | ··set_fact: | 127 | ··set_fact: |
| Offset 198, 14 lines modified | Offset 173, 39 lines modified | ||
| 198 | ··-·PCI-DSSv4-2.2.7 | 173 | ··-·PCI-DSSv4-2.2.7 |
| 199 | ··-·configure_crypto_policy | 174 | ··-·configure_crypto_policy |
| 200 | ··-·high_severity | 175 | ··-·high_severity |
| 201 | ··-·low_complexity | 176 | ··-·low_complexity |
| 202 | ··-·low_disruption | 177 | ··-·low_disruption |
| 203 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 204 | ··-·restrict_strategy | 179 | ··-·restrict_strategy |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 185 | --- | ||
| 186 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 187 | kind:·MachineConfig | ||
| 188 | spec: | ||
| 189 | ··config: | ||
| 190 | ····ignition: | ||
| 191 | ······version:·3.1.0 | ||
| 192 | ····systemd: | ||
| 193 | ······units: | ||
| 194 | ········-·name:·configure-crypto-policy.service | ||
| 195 | ··········enabled:·true | ||
| 196 | ··········contents:·| | ||
| 197 | ············[Unit] | ||
| 198 | ············Before=kubelet.service | ||
| 199 | ············[Service] | ||
| 200 | ············Type=oneshot | ||
| 201 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 202 | ············RemainAfterExit=yes | ||
| 203 | ············[Install] | ||
| 204 | ············WantedBy=multi-user.target | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 206 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 207 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 207 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 208 | Severity: ···medium | 208 | Severity: ···medium |
| 209 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 209 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 210 | Identifiers:·CCE-83445-7 | 210 | Identifiers:·CCE-83445-7 |
| 211 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 211 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1124, 36 lines modified | Offset 1124, 14 lines modified | ||
| 1124 | cat·<<EOF·>/etc/issue | 1124 | cat·<<EOF·>/etc/issue |
| 1125 | $formatted | 1125 | $formatted |
| 1126 | EOF | 1126 | EOF |
| 1127 | else | 1127 | else |
| 1128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1129 | fi | 1129 | fi |
| 1130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1131 | --- | ||
| 1132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1133 | kind:·MachineConfig | ||
| 1134 | metadata: | ||
| 1135 | ··labels: | ||
| 1136 | ····machineconfiguration.openshift.io/role:·master | ||
| 1137 | ····machineconfiguration.openshift.io/role:·worker | ||
| 1138 | ··name:·75-banner-etc-issue | ||
| 1139 | spec: | ||
| 1140 | ··config: | ||
| 1141 | ····ignition: | ||
| 1142 | ······version:·3.1.0 | ||
| 1143 | ····storage: | ||
| 1144 | ······files: | ||
| 1145 | ······-·contents: | ||
| 1146 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 1147 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 1148 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 1149 | ········mode:·0644 | ||
| 1150 | ········path:·/etc/issue.d/legal-notice | ||
| 1151 | ········overwrite:·true | ||
| 1152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 89435/96473 bytes (92.70%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2028·6173·206f·6620·3230·3236·2d30·····(as·of·2026-0 | ||
| 00037e60:·3 | 00037e60:·312d·3238·290a·2020·2020·2020·2020·2020··1-28).·········· | ||
| 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15232, 190 lines modified | Offset 15232, 190 lines modified | ||
| 0003b7f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b7f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b800:·743d·2223·6964·6d39·3230·3222·2074·6162··t="#idm9202"·tab | 0003b800:·743d·2223·6964·6d39·3230·3222·2074·6162··t="#idm9202"·tab | ||
| 0003b810:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b810:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b820:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b820:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b830:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b830:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b840:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b840:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b850:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b850:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b860:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b860:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b870:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b880:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b890:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b8a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b8b0:·643d·2269·646d·3932·3032·223e·3c74·6162··d="idm9202"><tab | |||
| 0003b8c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b8d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b8e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b900:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b870:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003b880:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b890:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b8a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b8b0:·2220·6964·3d22·6964·6d39·3230·3222·3e3c··"·id="idm9202">< | |||
| 0003b8c0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b8d0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b8e0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b8f0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b900:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b910:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b920:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b930:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b9 | 0003b910:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b950:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b9 | 0003b920:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b930:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b940:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b950:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b960:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b970:· | 0003b970:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b980:· | 0003b980:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b990:· | 0003b990:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b9a0:· | 0003b9a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b9b0:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003b9c0:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003b9d0:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003b9e0:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003b9f0:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003ba00:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003ba10:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003ba20:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003ba30:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003ba40:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003ba50:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003ba60:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003ba70:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003ba80:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003ba90:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003baa0:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 0003bab0:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 0003bac0:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 0003bad0:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 0003bae0:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 0003baf0:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 0003bb00:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 0003bb10:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 0003bb20:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 0003bb30:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003bb40:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 0003bb50:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | |||
| 0003bb60:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 0003bb70:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 0003bb80:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 0003bb90:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 0003bba0:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 0003bbb0:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 0003bbc0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bbd0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bbe0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bbf0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bc00:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bc10:·2223·6964·6d39·3230·3322·2074·6162·696e··"#idm9203"·tabin | |||
| 0003bc20:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bc30:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bc40:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bc50:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bc60:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bc70:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003bc80:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bc90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bca0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bcb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bcc0:·2269·646d·3932·3033·223e·3c74·6162·6c65··"idm9203"><table | |||
| 0003bcd0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bce0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bcf0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bd00:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd10:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd30:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bd40:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bd50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bd60:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bd70:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bd80:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bd90:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003bda0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003bdb0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b | 0003b9b0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003b | 0003b9c0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003b | 0003b9d0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| Max diff block lines reached; 1517625/1543761 bytes (98.31%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Intermediate | 43 | ··············Linux·9·-·Intermediate |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 123, 39 lines modified | Offset 123, 14 lines modified | ||
| 123 | » echo·"to·see·what·package·to·(re)install"·>&2 | 123 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 124 | » false··#·end·with·an·error·code | 124 | » false··#·end·with·an·error·code |
| 125 | elif·test·"$rc"·!=·0;·then | 125 | elif·test·"$rc"·!=·0;·then |
| 126 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 126 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 127 | » false··#·end·with·an·error·code | 127 | » false··#·end·with·an·error·code |
| 128 | fi | 128 | fi |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 134 | --- | ||
| 135 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 136 | kind:·MachineConfig | ||
| 137 | spec: | ||
| 138 | ··config: | ||
| 139 | ····ignition: | ||
| 140 | ······version:·3.1.0 | ||
| 141 | ····systemd: | ||
| 142 | ······units: | ||
| 143 | ········-·name:·configure-crypto-policy.service | ||
| 144 | ··········enabled:·true | ||
| 145 | ··········contents:·| | ||
| 146 | ············[Unit] | ||
| 147 | ············Before=kubelet.service | ||
| 148 | ············[Service] | ||
| 149 | ············Type=oneshot | ||
| 150 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 151 | ············RemainAfterExit=yes | ||
| 152 | ············[Install] | ||
| 153 | ············WantedBy=multi-user.target | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 159 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 134 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 160 | ··set_fact: | 135 | ··set_fact: |
| Offset 206, 14 lines modified | Offset 181, 39 lines modified | ||
| 206 | ··-·PCI-DSSv4-2.2.7 | 181 | ··-·PCI-DSSv4-2.2.7 |
| 207 | ··-·configure_crypto_policy | 182 | ··-·configure_crypto_policy |
| 208 | ··-·high_severity | 183 | ··-·high_severity |
| 209 | ··-·low_complexity | 184 | ··-·low_complexity |
| 210 | ··-·low_disruption | 185 | ··-·low_disruption |
| 211 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 212 | ··-·restrict_strategy | 187 | ··-·restrict_strategy |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 193 | --- | ||
| 194 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 195 | kind:·MachineConfig | ||
| 196 | spec: | ||
| 197 | ··config: | ||
| 198 | ····ignition: | ||
| 199 | ······version:·3.1.0 | ||
| 200 | ····systemd: | ||
| 201 | ······units: | ||
| 202 | ········-·name:·configure-crypto-policy.service | ||
| 203 | ··········enabled:·true | ||
| 204 | ··········contents:·| | ||
| 205 | ············[Unit] | ||
| 206 | ············Before=kubelet.service | ||
| 207 | ············[Service] | ||
| 208 | ············Type=oneshot | ||
| 209 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 210 | ············RemainAfterExit=yes | ||
| 211 | ············[Install] | ||
| 212 | ············WantedBy=multi-user.target | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 216 | Severity: ···medium | 216 | Severity: ···medium |
| 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 218 | Identifiers:·CCE-83445-7 | 218 | Identifiers:·CCE-83445-7 |
| 219 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 219 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 2209, 36 lines modified | Offset 2209, 14 lines modified | ||
| 2209 | cat·<<EOF·>/etc/issue | 2209 | cat·<<EOF·>/etc/issue |
| 2210 | $formatted | 2210 | $formatted |
| 2211 | EOF | 2211 | EOF |
| 2212 | else | 2212 | else |
| 2213 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2213 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2214 | fi | 2214 | fi |
| 2215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2216 | --- | ||
| 2217 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2218 | kind:·MachineConfig | ||
| 2219 | metadata: | ||
| 2220 | ··labels: | ||
| 2221 | ····machineconfiguration.openshift.io/role:·master | ||
| 2222 | ····machineconfiguration.openshift.io/role:·worker | ||
| 2223 | ··name:·75-banner-etc-issue | ||
| 2224 | spec: | ||
| 2225 | ··config: | ||
| 2226 | ····ignition: | ||
| 2227 | ······version:·3.1.0 | ||
| 2228 | ····storage: | ||
| 2229 | ······files: | ||
| 2230 | ······-·contents: | ||
| 2231 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 2232 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 2233 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 2234 | ········mode:·0644 | ||
| 2235 | ········path:·/etc/issue.d/legal-notice | ||
| 2236 | ········overwrite:·true | ||
| 2237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 131534/138586 bytes (94.91%) of diff not shown. | |||
| Offset 14299, 15 lines modified | Offset 14299, 15 lines modified | ||
| 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e10:·6620·3230·323 | 00037e10:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15158, 237 lines modified | Offset 15158, 237 lines modified | ||
| 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b3c0:·656d·6564·6961·7469·6f6e·20 | 0003b3c0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b3d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b3e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b400:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b410:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b3d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b3e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b3f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b400:·2220·6964·3d22·6964·6d38·3430·3622·3e3c··"·id="idm8406">< | |||
| 0003b410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b440:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b450:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b460:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b470:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b480:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b490:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b4a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b4b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b4c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b4d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b4e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b4f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b500:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b510:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003b520:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b530:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b540:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b550:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b560:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b570:·6964·6d38·3430·3722·2074·6162·696e·6465··idm8407"·tabinde | |||
| 0003b580:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b590:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b5a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b5b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b5c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b5d0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b5e0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b5f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b600:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b610:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b620:·3430·3722·3e3c·7461·626c·6520·636c·6173··407"><table·clas | |||
| 0003b630:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b640:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b650:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b660:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b670:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b680:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b690:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b6a0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b6b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b6c0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b6d0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b6e0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b6f0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b700:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b420:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b430:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b440:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b450:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b720:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b730:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b740:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b750:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b760:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b770:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b780:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b790:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b7a0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b7b0:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b7c0:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b7d0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b7e0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b7f0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b800:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b810:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b820:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b | 0003b460:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b | 0003b470:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b | 0003b480:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b | 0003b490:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b | 0003b4a0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b | 0003b4b0:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b4c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b4d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b4e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b4f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b500:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b510:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b520:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b530:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b540:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b550:·2220·6964·3d22·6964·6d38·3430·3722·3e3c··"·id="idm8407">< | |||
| 0003b560:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b570:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b580:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b590:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b5c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b5d0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b5e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| Max diff block lines reached; 4221370/4253854 bytes (99.24%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 21 lines modified | Offset 111, 19 lines modified | ||
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 112 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 112 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 114 | ·············_\x8c_\x8i_\x8s············6.1.1 | 114 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package | 119 | [[packages]] |
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | 127 | #·Remediation·is·applicable·only·in·certain·platforms |
| 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 128 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 156, 38 lines modified | Offset 154, 40 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 156 | ··-·low_complexity |
| 159 | ··-·low_disruption | 157 | ··-·low_disruption |
| 160 | ··-·medium_severity | 158 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·--add=aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | include·install_aide | 166 | include·install_aide |
| 179 | class·install_aide·{ | 167 | class·install_aide·{ |
| 180 | ··package·{·'aide': | 168 | ··package·{·'aide': |
| 181 | ····ensure·=>·'installed', | 169 | ····ensure·=>·'installed', |
| 182 | ··} | 170 | ··} |
| 183 | } | 171 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·install·aide | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·--add=aide | ||
| 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 185 | Run·the·following·command·to·generate·a·new·database: | 185 | Run·the·following·command·to·generate·a·new·database: |
| 186 | $·sudo·/usr/sbin/aide·--init | 186 | $·sudo·/usr/sbin/aide·--init |
| 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 188 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 188 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 189 | To·initiate·a·manual·check,·run·the·following·command: | 189 | To·initiate·a·manual·check,·run·the·following·command: |
| 190 | $·sudo·/usr/sbin/aide·--check | 190 | $·sudo·/usr/sbin/aide·--check |
| Offset 699, 39 lines modified | Offset 699, 14 lines modified | ||
| 699 | » echo·"to·see·what·package·to·(re)install"·>&2 | 699 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 700 | » false··#·end·with·an·error·code | 700 | » false··#·end·with·an·error·code |
| 701 | elif·test·"$rc"·!=·0;·then | 701 | elif·test·"$rc"·!=·0;·then |
| 702 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 702 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 703 | » false··#·end·with·an·error·code | 703 | » false··#·end·with·an·error·code |
| 704 | fi | 704 | fi |
| 705 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 706 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 707 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 708 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 709 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 710 | --- | ||
| 711 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 712 | kind:·MachineConfig | ||
| 713 | spec: | ||
| 714 | ··config: | ||
| 715 | ····ignition: | ||
| 716 | ······version:·3.1.0 | ||
| 717 | ····systemd: | ||
| 718 | ······units: | ||
| 719 | ········-·name:·configure-crypto-policy.service | ||
| 720 | ··········enabled:·true | ||
| 721 | ··········contents:·| | ||
| 722 | ············[Unit] | ||
| 723 | ············Before=kubelet.service | ||
| 724 | ············[Service] | ||
| 725 | ············Type=oneshot | ||
| 726 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 727 | ············RemainAfterExit=yes | ||
| 728 | ············[Install] | ||
| 729 | ············WantedBy=multi-user.target | ||
| 730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 705 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 389066/394778 bytes (98.55%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e10:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037e20:·2d3 | 00037e20:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15127, 236 lines modified | Offset 15127, 236 lines modified | ||
| 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | ||
| 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b1e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b1d0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b1e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b1f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b200:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b210:·2269·646d·3834·3036·223e·3c74·6162·6c65··"idm8406"><table | |||
| 0003b220:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b230:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b240:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b250:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b260:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b270:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b280:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b290:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b2a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b2c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b2d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b2e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b2f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b300:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b310:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003b320:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003b330:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b340:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b350:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b360:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b370:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b380:·3037·2220·7461·6269·6e64·6578·3d22·3022··07"·tabindex="0" | |||
| 0003b390:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b3a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b3b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b3c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b3d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b3e0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b3f0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b400:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b410:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b420:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b430:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b440:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b450:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b460:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b470:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b480:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b490:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b4a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b4b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b4c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b4d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b4e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b4f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b500:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b510:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b520:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b530:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b540:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b550:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b560:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b570:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b580:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b590:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b5a0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b5b0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b5c0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003b5d0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b5e0:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b5f0:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b600:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b610:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b620:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b630:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b640:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b650:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b660:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b670:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b680:·6574·3d22·2369·646d·3834·3038·2220·7461··et="#idm8408"·ta | |||
| 0003b690:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b6a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b6b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b6c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b6d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b6e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b6f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b | 0003b1f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b200:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b210:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b220:·6964·3d22·6964·6d38·3430·3622·3e3c·7072··id="idm8406"><pr | ||
| 0003b230:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b240:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b250:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b260:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b270:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b280:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b290:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b2a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b2b0:·6574·3d22·2369·646d·3834·3037·2220·7461··et="#idm8407"·ta | |||
| 0003b2c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b2d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b2e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b2f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b300:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| Max diff block lines reached; 2430820/2463304 bytes (98.68%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 21 lines modified | Offset 106, 19 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package | 114 | [[packages]] |
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | 122 | #·Remediation·is·applicable·only·in·certain·platforms |
| 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 123 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 151, 38 lines modified | Offset 149, 40 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 151 | ··-·low_complexity |
| 154 | ··-·low_disruption | 152 | ··-·low_disruption |
| 155 | ··-·medium_severity | 153 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | package·--add=aide | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_aide | 161 | include·install_aide |
| 174 | class·install_aide·{ | 162 | class·install_aide·{ |
| 175 | ··package·{·'aide': | 163 | ··package·{·'aide': |
| 176 | ····ensure·=>·'installed', | 164 | ····ensure·=>·'installed', |
| 177 | ··} | 165 | ··} |
| 178 | } | 166 | } |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·install·aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 184 | To·initiate·a·manual·check,·run·the·following·command: | 184 | To·initiate·a·manual·check,·run·the·following·command: |
| 185 | $·sudo·/usr/sbin/aide·--check | 185 | $·sudo·/usr/sbin/aide·--check |
| Offset 694, 39 lines modified | Offset 694, 14 lines modified | ||
| 694 | » echo·"to·see·what·package·to·(re)install"·>&2 | 694 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 695 | » false··#·end·with·an·error·code | 695 | » false··#·end·with·an·error·code |
| 696 | elif·test·"$rc"·!=·0;·then | 696 | elif·test·"$rc"·!=·0;·then |
| 697 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 697 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 698 | » false··#·end·with·an·error·code | 698 | » false··#·end·with·an·error·code |
| 699 | fi | 699 | fi |
| 700 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 701 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 702 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 703 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 704 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 705 | --- | ||
| 706 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 707 | kind:·MachineConfig | ||
| 708 | spec: | ||
| 709 | ··config: | ||
| 710 | ····ignition: | ||
| 711 | ······version:·3.1.0 | ||
| 712 | ····systemd: | ||
| 713 | ······units: | ||
| 714 | ········-·name:·configure-crypto-policy.service | ||
| 715 | ··········enabled:·true | ||
| 716 | ··········contents:·| | ||
| 717 | ············[Unit] | ||
| 718 | ············Before=kubelet.service | ||
| 719 | ············[Service] | ||
| 720 | ············Type=oneshot | ||
| 721 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 722 | ············RemainAfterExit=yes | ||
| 723 | ············[Install] | ||
| 724 | ············WantedBy=multi-user.target | ||
| 725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 700 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 265046/270768 bytes (97.89%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15118, 237 lines modified | Offset 15118, 237 lines modified | ||
| 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b140:·5265·6d65·6469·6174·696f·6e20· | 0003b140:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b150:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b150:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b160:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b170:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b180:·6522·2069·643d·2269·646d·3834·3036·223e··e"·id="idm8406"> | |||
| 0003b190:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b1a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b1b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b1c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b1d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b1e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b1f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b200:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b210:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b220:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b230:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b240:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b250:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b260:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b270:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b280:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b290:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b2a0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b2b0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b2c0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b2d0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b2e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b2f0:·2369·646d·3834·3037·2220·7461·6269·6e64··#idm8407"·tabind | |||
| 0003b300:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b310:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b320:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b330:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b340:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b350:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b360:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b370:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b380:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b390:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b3a0:·3834·3037·223e·3c74·6162·6c65·2063·6c61··8407"><table·cla | |||
| 0003b3b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b400:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b410:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b420:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b430:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b440:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b450:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b460:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b470:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b480:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b490:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b4a0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b4b0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b4c0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b4d0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b4e0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b4f0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b500:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b510:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b520:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b530:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b540:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b550:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b560:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b570:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b580:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b590:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b5a0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b5b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b5c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b5d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b5e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b5f0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b600:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | |||
| 0003b610:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b620:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b630:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b640:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b650:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b660:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b | 0003b160:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003b170:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b180:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b190:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | ||
| 0003b1a0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 0003b1b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b1c0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b1d0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b6b0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b6c0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b6d0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b6e0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b6f0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b700:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b710:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b720:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b730:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b740:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b750:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b760:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| Max diff block lines reached; 2139527/2172011 bytes (98.50%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 21 lines modified | Offset 105, 19 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package | 113 | [[packages]] |
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | 121 | #·Remediation·is·applicable·only·in·certain·platforms |
| 124 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 122 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 150, 38 lines modified | Offset 148, 40 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 150 | ··-·low_complexity |
| 153 | ··-·low_disruption | 151 | ··-·low_disruption |
| 154 | ··-·medium_severity | 152 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 160 | include·install_aide |
| 173 | class·install_aide·{ | 161 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 162 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 163 | ····ensure·=>·'installed', |
| 176 | ··} | 164 | ··} |
| 177 | } | 165 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 183 | To·initiate·a·manual·check,·run·the·following·command: | 183 | To·initiate·a·manual·check,·run·the·following·command: |
| 184 | $·sudo·/usr/sbin/aide·--check | 184 | $·sudo·/usr/sbin/aide·--check |
| Offset 693, 39 lines modified | Offset 693, 14 lines modified | ||
| 693 | » echo·"to·see·what·package·to·(re)install"·>&2 | 693 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 694 | » false··#·end·with·an·error·code | 694 | » false··#·end·with·an·error·code |
| 695 | elif·test·"$rc"·!=·0;·then | 695 | elif·test·"$rc"·!=·0;·then |
| 696 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 696 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 697 | » false··#·end·with·an·error·code | 697 | » false··#·end·with·an·error·code |
| 698 | fi | 698 | fi |
| 699 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 700 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 701 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 702 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 703 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 704 | --- | ||
| 705 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 706 | kind:·MachineConfig | ||
| 707 | spec: | ||
| 708 | ··config: | ||
| 709 | ····ignition: | ||
| 710 | ······version:·3.1.0 | ||
| 711 | ····systemd: | ||
| 712 | ······units: | ||
| 713 | ········-·name:·configure-crypto-policy.service | ||
| 714 | ··········enabled:·true | ||
| 715 | ··········contents:·| | ||
| 716 | ············[Unit] | ||
| 717 | ············Before=kubelet.service | ||
| 718 | ············[Service] | ||
| 719 | ············Type=oneshot | ||
| 720 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 721 | ············RemainAfterExit=yes | ||
| 722 | ············[Install] | ||
| 723 | ············WantedBy=multi-user.target | ||
| 724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 699 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 237601/243259 bytes (97.67%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15150, 236 lines modified | Offset 15150, 236 lines modified | ||
| 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b340:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b350:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b340:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b350:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b360:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b370:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b380:·6964·6d38·3430·3622·3e3c·7461·626c·6520··idm8406"><table· | |||
| 0003b390:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b3a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b3b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b3c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b3d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b3e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b3f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b400:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b410:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b420:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b430:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b440:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b450:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b460:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b470:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b480:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003b490:·6c20·6169·6465·0a3c·2f63·6f64·653e·3c2f··l·aide.</code></ | |||
| 0003b4a0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b4b0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b4c0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b4d0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b4e0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | |||
| 0003b4f0:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | |||
| 0003b500:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b510:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b520:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b530:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b540:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b550:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b560:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b570:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b580:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b590:·2220·6964·3d22·6964·6d38·3430·3722·3e3c··"·id="idm8407">< | |||
| 0003b5a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b5c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b5d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b610:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b640:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b660:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b670:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b680:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b690:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003b6a0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b6b0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b6c0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b6d0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003b6e0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003b6f0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003b700:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003b710:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003b720:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003b730:·7468·656e·0a20·2020·2064·6e66·2069·6e73··then.····dnf·ins | |||
| 0003b740:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003b750:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003b760:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b770:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b780:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b790:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b7a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b7f0:·743d·2223·6964·6d38·3430·3822·2074·6162··t="#idm8408"·tab | |||
| 0003b800:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b810:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b820:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b830:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b840:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b850:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b860:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b | 0003b360:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b370:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b380:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b390:·643d·2269·646d·3834·3036·223e·3c70·7265··d="idm8406"><pre | ||
| 0003b8b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b8c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b8d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b8f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b920:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b930:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b940:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b950:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b970:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b980:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b990:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| Max diff block lines reached; 4075731/4108077 bytes (99.21%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 110, 21 lines modified | Offset 110, 19 lines modified | ||
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ·············_\x8c_\x8i_\x8s············6.1.1 | 113 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package | 118 | [[packages]] |
| 119 | name·=·"aide" | ||
| 120 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | 126 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 38 lines modified | Offset 153, 40 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 155 | ··-·low_complexity |
| 158 | ··-·low_disruption | 156 | ··-·low_disruption |
| 159 | ··-·medium_severity | 157 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | package·--add=aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_aide | 165 | include·install_aide |
| 178 | class·install_aide·{ | 166 | class·install_aide·{ |
| 179 | ··package·{·'aide': | 167 | ··package·{·'aide': |
| 180 | ····ensure·=>·'installed', | 168 | ····ensure·=>·'installed', |
| 181 | ··} | 169 | ··} |
| 182 | } | 170 | } |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·install·aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·--add=aide | ||
| 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 184 | Run·the·following·command·to·generate·a·new·database: | 184 | Run·the·following·command·to·generate·a·new·database: |
| 185 | $·sudo·/usr/sbin/aide·--init | 185 | $·sudo·/usr/sbin/aide·--init |
| 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 187 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 187 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 188 | To·initiate·a·manual·check,·run·the·following·command: | 188 | To·initiate·a·manual·check,·run·the·following·command: |
| 189 | $·sudo·/usr/sbin/aide·--check | 189 | $·sudo·/usr/sbin/aide·--check |
| Offset 698, 39 lines modified | Offset 698, 14 lines modified | ||
| 698 | » echo·"to·see·what·package·to·(re)install"·>&2 | 698 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 699 | » false··#·end·with·an·error·code | 699 | » false··#·end·with·an·error·code |
| 700 | elif·test·"$rc"·!=·0;·then | 700 | elif·test·"$rc"·!=·0;·then |
| 701 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 701 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 702 | » false··#·end·with·an·error·code | 702 | » false··#·end·with·an·error·code |
| 703 | fi | 703 | fi |
| 704 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 705 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 706 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 707 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 708 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 709 | --- | ||
| 710 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 711 | kind:·MachineConfig | ||
| 712 | spec: | ||
| 713 | ··config: | ||
| 714 | ····ignition: | ||
| 715 | ······version:·3.1.0 | ||
| 716 | ····systemd: | ||
| 717 | ······units: | ||
| 718 | ········-·name:·configure-crypto-policy.service | ||
| 719 | ··········enabled:·true | ||
| 720 | ··········contents:·| | ||
| 721 | ············[Unit] | ||
| 722 | ············Before=kubelet.service | ||
| 723 | ············[Service] | ||
| 724 | ············Type=oneshot | ||
| 725 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 726 | ············RemainAfterExit=yes | ||
| 727 | ············[Install] | ||
| 728 | ············WantedBy=multi-user.target | ||
| 729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 704 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 374117/379775 bytes (98.51%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038050:·206f·6620·3230·323 | 00038050:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15614, 352 lines modified | Offset 15614, 352 lines modified | ||
| 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003cfe0:·2369·646d·3839·3836·2220·7461·6269·6e64··#idm8986"·tabind | 0003cfe0:·2369·646d·3839·3836·2220·7461·6269·6e64··#idm8986"·tabind | ||
| 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003d040:·5265·6d65·6469·6174·696f·6e20· | 0003d040:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003d050:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003d060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003d070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003d080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003d090:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | |||
| 0003d0a0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 0003d0b0:·6375·7374·6f6d·697a·6174·696f·6e73·5d0a··customizations]. | |||
| 0003d0c0:·6669·7073·203d·2074·7275·650a·3c2f·636f··fips·=·true.</co | |||
| 0003d0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d120:·646d·3839·3837·2220·7461·6269·6e64·6578··dm8987"·tabindex | |||
| 0003d130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d180:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003d | 0003d190:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003d | 0003d1a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003d | 0003d1b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003d | 0003d1c0:·6c61·7073·6522·2069·643d·2269·646d·3839··lapse"·id="idm89 | ||
| 0003d | 0003d1d0:·3837·223e·3c70·7265·3e3c·636f·6465·3e23··87"><pre><code># | ||
| 0003d | 0003d1e0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003d | 0003d1f0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003d | 0003d200:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003d | 0003d210:·6f72·6d73·0a69·6620·2820·5b20·2120·2d66··orms.if·(·[·!·-f | ||
| 0003d | 0003d220:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | ||
| 0003d230:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003d240:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003d250:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003d260:·2021·2028·205b·2022·247b·636f·6e74·6169···!·(·[·"${contai | |||
| 0003d270:·6e65·723a·2d7d·2220·3d3d·2022·6277·7261··ner:-}"·==·"bwra | |||
| 0003d280:·702d·6f73·6275·696c·6422·205d·2029·2029··p-osbuild"·]·)·) | |||
| 0003d | 0003d290:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 0003d2a0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003d100:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003d110:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003d120:·703b·2021·2028·205b·2022·247b·636f·6e74··p;·!·(·[·"${cont | |||
| 0003d130:·6169·6e65·723a·2d7d·2220·3d3d·2022·6277··ainer:-}"·==·"bw | |||
| 0003d140:·7261·702d·6f73·6275·696c·6422·205d·2029··rap-osbuild"·]·) | |||
| 0003d | 0003d2b0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 0003d160:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003d170:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003d | 0003d2c0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 0003d | 0003d2d0:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 0003d | 0003d2e0:·656e·0a0a·7661·725f·7379·7374·656d·5f63··en..var_system_c | ||
| 0003d | 0003d2f0:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | ||
| 0003d | 0003d300:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | ||
| 0003d | 0003d310:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | ||
| 0003d | 0003d320:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | ||
| 0003d | 0003d330:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 0003d | 0003d340:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | ||
| 0003d | 0003d350:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003d | 0003d360:·7922·3e46·4950·533c·2f61·6262·723e·270a··y">FIPS</abbr>'. | ||
| 0003d | 0003d370:·0a0a·6669·7073·2d6d·6f64·652d·7365·7475··..fips-mode-setu | ||
| 0003d | 0003d380:·7020·2d2d·656e·6162·6c65·0a0a·7374·6465··p·--enable..stde | ||
| 0003d | 0003d390:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | ||
| 0003d | 0003d3a0:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | ||
| 0003d | 0003d3b0:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | ||
| 0003d | 0003d3c0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003d | 0003d3d0:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | ||
| 0003d | 0003d3e0:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | ||
| 0003d | 0003d3f0:·290a·7263·3d24·3f0a·0a69·6620·7465·7374··).rc=$?..if·test | ||
| 0003d | 0003d400:·2022·2472·6322·203d·2031·3237·3b20·7468···"$rc"·=·127;·th | ||
| 0003d | 0003d410:·656e·0a09·6563·686f·2022·2473·7464·6572··en..echo·"$stder | ||
| 0003d | 0003d420:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | ||
| 0003d | 0003d430:·616d·703b·320a·0965·6368·6f20·224d·616b··amp;2..echo·"Mak | ||
| 0003d | 0003d440:·6520·7375·7265·2074·6861·7420·7468·6520··e·sure·that·the· | ||
| 0003d | 0003d450:·7363·7269·7074·2069·7320·696e·7374·616c··script·is·instal | ||
| 0003d | 0003d460:·6c65·6420·6f6e·2074·6865·2072·656d·6564··led·on·the·remed | ||
| 0003d | 0003d470:·6961·7465·6420·7379·7374·656d·2e22·2026··iated·system."·& | ||
| 0003d | 0003d480:·6774·3b26·616d·703b·320a·0965·6368·6f20··gt;&2..echo· | ||
| 0003d | 0003d490:·2253·6565·206f·7574·7075·7420·6f66·2074··"See·output·of·t | ||
| 0003d | 0003d4a0:·6865·2027·646e·6620·7072·6f76·6964·6573··he·'dnf·provides | ||
| 0003d | 0003d4b0:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | ||
| 0003d | 0003d4c0:·6f6c·6963·6965·7327·2063·6f6d·6d61·6e64··olicies'·command | ||
| 0003d | 0003d4d0:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | ||
| 0003d | 0003d4e0:·686f·2022·746f·2073·6565·2077·6861·7420··ho·"to·see·what· | ||
| 0003d | 0003d4f0:·7061·636b·6167·6520·746f·2028·7265·2969··package·to·(re)i | ||
| 0003d | 0003d500:·6e73·7461·6c6c·2220·2667·743b·2661·6d70··nstall"·>& | ||
| 0003d | 0003d510:·3b32·0a0a·0966·616c·7365·2020·2320·656e··;2...false··#·en | ||
| 0003d | 0003d520:·6420·7769·7468·2061·6e20·6572·726f·7220··d·with·an·error· | ||
| 0003d | 0003d530:·636f·6465·0a65·6c69·6620·7465·7374·2022··code.elif·test·" | ||
| 0003d | 0003d540:·2472·6322·2021·3d20·303b·2074·6865·6e0a··$rc"·!=·0;·then. | ||
| 0003d | 0003d550:·0965·6368·6f20·2245·7272·6f72·2069·6e76··.echo·"Error·inv | ||
| 0003d | 0003d560:·6f6b·696e·6720·7468·6520·7570·6461·7465··oking·the·update | ||
| 0003d | 0003d570:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | ||
| 0003d | 0003d580:·2073·6372·6970·743a·2024·7374·6465·7272···script:·$stderr | ||
| 0003d | 0003d590:·5f6f·665f·6361·6c6c·2220·2667·743b·2661··_of_call"·>&a | ||
| 0003d | 0003d5a0:·6d70·3b32·0a09·6661·6c73·6520·2023·2065··mp;2..false··#·e | ||
| 0003d | 0003d5b0:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | ||
| 0003d | 0003d5c0:·2063·6f64·650a·6669·0a0a·656c·7365·0a20···code.fi..else.· | ||
| 0003d | 0003d5d0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003d | 0003d5e0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003d | 0003d5f0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003d | 0003d600:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003d | 0003d610:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003d | 0003d620:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003d | 0003d630:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003d | 0003d640:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| Max diff block lines reached; 2681488/2729842 bytes (98.23%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:9 | 54 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 208, 14 lines modified | Offset 208, 18 lines modified | ||
| 208 | ·············_\x8i_\x8s_\x8m······1446 | 208 | ·············_\x8i_\x8s_\x8m······1446 |
| 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 216 | [customizations] | ||
| 217 | fips·=·true | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | 219 | #·Remediation·is·applicable·only·in·certain·platforms |
| 217 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 220 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 218 | var_system_crypto_policy='FIPS' | 221 | var_system_crypto_policy='FIPS' |
| Offset 346, 18 lines modified | Offset 350, 14 lines modified | ||
| 346 | ··-·NIST-800-53-SC-13 | 350 | ··-·NIST-800-53-SC-13 |
| 347 | ··-·enable_fips_mode | 351 | ··-·enable_fips_mode |
| 348 | ··-·high_severity | 352 | ··-·high_severity |
| 349 | ··-·medium_complexity | 353 | ··-·medium_complexity |
| 350 | ··-·medium_disruption | 354 | ··-·medium_disruption |
| 351 | ··-·reboot_required | 355 | ··-·reboot_required |
| 352 | ··-·restrict_strategy | 356 | ··-·restrict_strategy |
| 353 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 354 | [customizations] | ||
| 355 | fips·=·true | ||
| 356 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 357 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 357 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 358 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 358 | ····*·GnuTLS·library | 359 | ····*·GnuTLS·library |
| 359 | ····*·OpenSSL·library | 360 | ····*·OpenSSL·library |
| 360 | ····*·NSS·library | 361 | ····*·NSS·library |
| 361 | ····*·OpenJDK | 362 | ····*·OpenJDK |
| 362 | ····*·Libkrb5 | 363 | ····*·Libkrb5 |
| Offset 371, 21 lines modified | Offset 371, 19 lines modified | ||
| 371 | Severity: ···medium | 371 | Severity: ···medium |
| 372 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 372 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 373 | Identifiers:·CCE-83442-4 | 373 | Identifiers:·CCE-83442-4 |
| 374 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 374 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 375 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 375 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 376 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 | 376 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 |
| 377 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 377 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 383 | package | 379 | [[packages]] |
| 380 | name·=·"crypto-policies" | ||
| 381 | version·=·"*" | ||
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 389 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 387 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 405, 38 lines modified | Offset 403, 40 lines modified | ||
| 405 | ··-·DISA-STIG-RHEL-09-672010 | 403 | ··-·DISA-STIG-RHEL-09-672010 |
| 406 | ··-·enable_strategy | 404 | ··-·enable_strategy |
| 407 | ··-·low_complexity | 405 | ··-·low_complexity |
| 408 | ··-·low_disruption | 406 | ··-·low_disruption |
| 409 | ··-·medium_severity | 407 | ··-·medium_severity |
| 410 | ··-·no_reboot_needed | 408 | ··-·no_reboot_needed |
| 411 | ··-·package_crypto-policies_installed | 409 | ··-·package_crypto-policies_installed |
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 413 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 414 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 415 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 416 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 417 | package·--add=crypto-policies | ||
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | [[packages]] | ||
| 420 | name·=·"crypto-policies" | ||
| 421 | version·=·"*" | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 411 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 412 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 413 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 414 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 427 | include·install_crypto-policies | 415 | include·install_crypto-policies |
| 428 | class·install_crypto-policies·{ | 416 | class·install_crypto-policies·{ |
| 429 | ··package·{·'crypto-policies': | 417 | ··package·{·'crypto-policies': |
| 430 | ····ensure·=>·'installed', | 418 | ····ensure·=>·'installed', |
| 431 | ··} | 419 | ··} |
| 432 | } | 420 | } |
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 426 | package·install·crypto-policies | ||
| 427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 428 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 429 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 430 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 431 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 432 | package·--add=crypto-policies | ||
| 433 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 433 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 434 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 434 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 435 | $·sudo·update-crypto-policies·--set·FIPS | 435 | $·sudo·update-crypto-policies·--set·FIPS |
| Max diff block lines reached; 354294/361162 bytes (98.10%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e30:·3032·3 | 00037e30:·3032·362d·3031·2d32·3829·0a20·2020·2020··026-01-28).····· | ||
| 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 17395, 190 lines modified | Offset 17395, 190 lines modified | ||
| 00043f20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00043f20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00043f30:·3d22·2369·646d·3932·3032·2220·7461·6269··="#idm9202"·tabi | 00043f30:·3d22·2369·646d·3932·3032·2220·7461·6269··="#idm9202"·tabi | ||
| 00043f40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00043f40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00043f50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00043f50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00043f60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00043f60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00043f70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00043f70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00043f80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00043f80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00043f90:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00043f90:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 00043fa0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00043fb0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00043fc0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00043fd0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00043fe0:·3d22·6964·6d39·3230·3222·3e3c·7461·626c··="idm9202"><tabl | |||
| 00043ff0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00044000:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00044010:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00044020:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00044030:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00043fa0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00043fb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00043fc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00043fd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00043fe0:·2069·643d·2269·646d·3932·3032·223e·3c74···id="idm9202"><t | |||
| 00043ff0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00044000:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00044010:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00044020:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00044030:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00044040:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00044050:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00044060:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000440 | 00044040:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 00044080:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000440 | 00044050:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 00044060:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00044070:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00044080:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00044090:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 000440a0:· | 000440a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 000440b0:· | 000440b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 000440c0:· | 000440c0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 000440d0:· | 000440d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 000440e0:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 000440f0:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 00044100:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 00044110:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 00044120:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 00044130:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 00044140:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 00044150:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 00044160:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 00044170:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 00044180:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 00044190:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 000441a0:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 000441b0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 000441c0:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 000441d0:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 000441e0:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 000441f0:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 00044200:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 00044210:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 00044220:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 00044230:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 00044240:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 00044250:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 00044260:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 00044270:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 00044280:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 00044290:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 000442a0:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 000442b0:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 000442c0:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 000442d0:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 000442e0:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 000442f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00044300:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00044310:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00044320:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00044330:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00044340:·2369·646d·3932·3033·2220·7461·6269·6e64··#idm9203"·tabind | |||
| 00044350:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00044360:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00044370:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00044380:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00044390:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 000443a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 000443b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 000443c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 000443d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000443e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000443f0:·6964·6d39·3230·3322·3e3c·7461·626c·6520··idm9203"><table· | |||
| 00044400:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00044410:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00044420:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00044430:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00044440:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00044450:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00044460:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00044470:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00044480:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00044490:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 000444a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 000444b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000444c0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 000444d0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 000444e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00044 | 000440e0:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | ||
| 00044 | 000440f0:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | ||
| 00044 | 00044100:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 00044 | 00044110:·7920·2320·7072·6f6d·6f74·6520·746f·2076··y·#·promote·to·v | ||
| Max diff block lines reached; 1767453/1793451 bytes (98.55%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 591, 39 lines modified | Offset 591, 14 lines modified | ||
| 591 | » echo·"to·see·what·package·to·(re)install"·>&2 | 591 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 592 | » false··#·end·with·an·error·code | 592 | » false··#·end·with·an·error·code |
| 593 | elif·test·"$rc"·!=·0;·then | 593 | elif·test·"$rc"·!=·0;·then |
| 594 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 594 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 595 | » false··#·end·with·an·error·code | 595 | » false··#·end·with·an·error·code |
| 596 | fi | 596 | fi |
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 602 | --- | ||
| 603 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 604 | kind:·MachineConfig | ||
| 605 | spec: | ||
| 606 | ··config: | ||
| 607 | ····ignition: | ||
| 608 | ······version:·3.1.0 | ||
| 609 | ····systemd: | ||
| 610 | ······units: | ||
| 611 | ········-·name:·configure-crypto-policy.service | ||
| 612 | ··········enabled:·true | ||
| 613 | ··········contents:·| | ||
| 614 | ············[Unit] | ||
| 615 | ············Before=kubelet.service | ||
| 616 | ············[Service] | ||
| 617 | ············Type=oneshot | ||
| 618 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 619 | ············RemainAfterExit=yes | ||
| 620 | ············[Install] | ||
| 621 | ············WantedBy=multi-user.target | ||
| 622 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 623 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 624 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 625 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 626 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 627 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 602 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 628 | ··set_fact: | 603 | ··set_fact: |
| Offset 674, 14 lines modified | Offset 649, 39 lines modified | ||
| 674 | ··-·PCI-DSSv4-2.2.7 | 649 | ··-·PCI-DSSv4-2.2.7 |
| 675 | ··-·configure_crypto_policy | 650 | ··-·configure_crypto_policy |
| 676 | ··-·high_severity | 651 | ··-·high_severity |
| 677 | ··-·low_complexity | 652 | ··-·low_complexity |
| 678 | ··-·low_disruption | 653 | ··-·low_disruption |
| 679 | ··-·no_reboot_needed | 654 | ··-·no_reboot_needed |
| 680 | ··-·restrict_strategy | 655 | ··-·restrict_strategy |
| 656 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 657 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 658 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 659 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 660 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 661 | --- | ||
| 662 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 663 | kind:·MachineConfig | ||
| 664 | spec: | ||
| 665 | ··config: | ||
| 666 | ····ignition: | ||
| 667 | ······version:·3.1.0 | ||
| 668 | ····systemd: | ||
| 669 | ······units: | ||
| 670 | ········-·name:·configure-crypto-policy.service | ||
| 671 | ··········enabled:·true | ||
| 672 | ··········contents:·| | ||
| 673 | ············[Unit] | ||
| 674 | ············Before=kubelet.service | ||
| 675 | ············[Service] | ||
| 676 | ············Type=oneshot | ||
| 677 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 678 | ············RemainAfterExit=yes | ||
| 679 | ············[Install] | ||
| 680 | ············WantedBy=multi-user.target | ||
| 681 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 681 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 682 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 682 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 683 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 683 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 684 | Severity: ···medium | 684 | Severity: ···medium |
| 685 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 685 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 686 | Identifiers:·CCE-83445-7 | 686 | Identifiers:·CCE-83445-7 |
| 687 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 687 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1033, 21 lines modified | Offset 1033, 19 lines modified | ||
| 1033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1034 | The·rear·package·can·be·installed·with·the·following·command: | 1034 | The·rear·package·can·be·installed·with·the·following·command: |
| 1035 | $·sudo·dnf·install·rear | 1035 | $·sudo·dnf·install·rear |
| 1036 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1036 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1037 | Severity: ···medium | 1037 | Severity: ···medium |
| 1038 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 1038 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1039 | Identifiers:·CCE-83503-3 | 1039 | Identifiers:·CCE-83503-3 |
| 1040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1041 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1042 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1043 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1044 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1045 | package | 1041 | [[packages]] |
| 1042 | name·=·"rear" | ||
| 1043 | version·=·"*" | ||
| 1046 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1047 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1048 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1049 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1050 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1051 | #·Remediation·is·applicable·only·in·certain·platforms | 1049 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1052 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 1050 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1077, 38 lines modified | Offset 1075, 40 lines modified | ||
| 1077 | ··-·CCE-83503-3 | 1075 | ··-·CCE-83503-3 |
| 1078 | ··-·enable_strategy | 1076 | ··-·enable_strategy |
| 1079 | ··-·low_complexity | 1077 | ··-·low_complexity |
| 1080 | ··-·low_disruption | 1078 | ··-·low_disruption |
| 1081 | ··-·medium_severity | 1079 | ··-·medium_severity |
| 1082 | ··-·no_reboot_needed | 1080 | ··-·no_reboot_needed |
| Max diff block lines reached; 157987/164637 bytes (95.96%) of diff not shown. | |||
| Offset 14320, 16 lines modified | Offset 14320, 16 lines modified | ||
| 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f60:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037f60:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037f70:·3 | 00037f70:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16770, 189 lines modified | Offset 16770, 189 lines modified | ||
| 00041810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 00041810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 00041820:·3032·2220·7461·6269·6e64·6578·3d22·3022··02"·tabindex="0" | 00041820:·3032·2220·7461·6269·6e64·6578·3d22·3022··02"·tabindex="0" | ||
| 00041830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00041830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00041840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00041840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00041850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00041850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00041860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00041860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00041870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00041870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00041880:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 00041890:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000418a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000418b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000418c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000418d0:·3932·3032·223e·3c74·6162·6c65·2063·6c61··9202"><table·cla | |||
| 000418e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000418f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041900:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041910:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041920:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00041930:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041 | 00041880:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 00041890:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000418a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000418b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000418c0:·6170·7365·2220·6964·3d22·6964·6d39·3230··apse"·id="idm920 | |||
| 000418d0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 000418e0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000418f0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041900:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00041910:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00041920:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041930:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041940:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041950:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000419 | 00041970:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 00041960:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00041970:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00041980:·6 | 00041980:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 00041990:· | 00041990:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 000419a0:· | 000419a0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 000419b0:· | 000419b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 000419c0:·6 | 000419c0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 000419d0:·2d2d·0a61·7069·5665·7273·696f·6e3a·206d··--.apiVersion:·m | |||
| 000419e0:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | |||
| 000419f0:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | |||
| 00041a00:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | |||
| 00041a10:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | |||
| 00041a20:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | |||
| 00041a30:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | |||
| 00041a40:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | |||
| 00041a50:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | |||
| 00041a60:·6974·733a·0a20·2020·2020·2020·202d·206e··its:.········-·n | |||
| 00041a70:·616d·653a·2063·6f6e·6669·6775·7265·2d63··ame:·configure-c | |||
| 00041a80:·7279·7074·6f2d·706f·6c69·6379·2e73·6572··rypto-policy.ser | |||
| 00041a90:·7669·6365·0a20·2020·2020·2020·2020·2065··vice.··········e | |||
| 00041aa0:·6e61·626c·6564·3a20·7472·7565·0a20·2020··nabled:·true.··· | |||
| 00041ab0:·2020·2020·2020·2063·6f6e·7465·6e74·733a·········contents: | |||
| 00041ac0:·207c·0a20·2020·2020·2020·2020·2020·205b···|.············[ | |||
| 00041ad0:·556e·6974·5d0a·2020·2020·2020·2020·2020··Unit].·········· | |||
| 00041ae0:·2020·4265·666f·7265·3d6b·7562·656c·6574····Before=kubelet | |||
| 00041af0:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 00041b00:·2020·2020·205b·5365·7276·6963·655d·0a20·······[Service].· | |||
| 00041b10:·2020·2020·2020·2020·2020·2054·7970·653d·············Type= | |||
| 00041b20:·6f6e·6573·686f·740a·2020·2020·2020·2020··oneshot.········ | |||
| 00041b30:·2020·2020·4578·6563·5374·6172·743d·7570······ExecStart=up | |||
| 00041b40:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 00041b50:·6369·6573·202d·2d73·6574·207b·7b2e·7661··cies·--set·{{.va | |||
| 00041b60:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00041b70:·706f·6c69·6379·7d7d·0a20·2020·2020·2020··policy}}.······· | |||
| 00041b80:·2020·2020·2052·656d·6169·6e41·6674·6572·······RemainAfter | |||
| 00041b90:·4578·6974·3d79·6573·0a20·2020·2020·2020··Exit=yes.······· | |||
| 00041ba0:·2020·2020·205b·496e·7374·616c·6c5d·0a20·······[Install].· | |||
| 00041bb0:·2020·2020·2020·2020·2020·2057·616e·7465·············Wante | |||
| 00041bc0:·6442·793d·6d75·6c74·692d·7573·6572·2e74··dBy=multi-user.t | |||
| 00041bd0:·6172·6765·740a·3c2f·636f·6465·3e3c·2f70··arget.</code></p | |||
| 00041be0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00041bf0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00041c00:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00041c10:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00041c20:·7461·7267·6574·3d22·2369·646d·3932·3033··target="#idm9203 | |||
| 00041c30:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00041c40:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00041c50:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00041c60:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00041c70:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00041c80:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00041c90:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00041ca0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00041cb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041cc0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041cd0:·7365·2220·6964·3d22·6964·6d39·3230·3322··se"·id="idm9203" | |||
| 00041ce0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00041cf0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00041d00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00041d10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00041d20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00041d30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00041d40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00041d50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00041d60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00041d70:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00041d80:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00041d90:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00041da0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00041db0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00041dc0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00041dd0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00041 | 000419d0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | ||
| 000419e0:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | |||
| 000419f0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| Max diff block lines reached; 1802624/1828622 bytes (98.58%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:9 | 50 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 458, 39 lines modified | Offset 458, 14 lines modified | ||
| 458 | » echo·"to·see·what·package·to·(re)install"·>&2 | 458 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 459 | » false··#·end·with·an·error·code | 459 | » false··#·end·with·an·error·code |
| 460 | elif·test·"$rc"·!=·0;·then | 460 | elif·test·"$rc"·!=·0;·then |
| 461 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 461 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 462 | » false··#·end·with·an·error·code | 462 | » false··#·end·with·an·error·code |
| 463 | fi | 463 | fi |
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 469 | --- | ||
| 470 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 471 | kind:·MachineConfig | ||
| 472 | spec: | ||
| 473 | ··config: | ||
| 474 | ····ignition: | ||
| 475 | ······version:·3.1.0 | ||
| 476 | ····systemd: | ||
| 477 | ······units: | ||
| 478 | ········-·name:·configure-crypto-policy.service | ||
| 479 | ··········enabled:·true | ||
| 480 | ··········contents:·| | ||
| 481 | ············[Unit] | ||
| 482 | ············Before=kubelet.service | ||
| 483 | ············[Service] | ||
| 484 | ············Type=oneshot | ||
| 485 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 486 | ············RemainAfterExit=yes | ||
| 487 | ············[Install] | ||
| 488 | ············WantedBy=multi-user.target | ||
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 494 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 469 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 495 | ··set_fact: | 470 | ··set_fact: |
| Offset 541, 14 lines modified | Offset 516, 39 lines modified | ||
| 541 | ··-·PCI-DSSv4-2.2.7 | 516 | ··-·PCI-DSSv4-2.2.7 |
| 542 | ··-·configure_crypto_policy | 517 | ··-·configure_crypto_policy |
| 543 | ··-·high_severity | 518 | ··-·high_severity |
| 544 | ··-·low_complexity | 519 | ··-·low_complexity |
| 545 | ··-·low_disruption | 520 | ··-·low_disruption |
| 546 | ··-·no_reboot_needed | 521 | ··-·no_reboot_needed |
| 547 | ··-·restrict_strategy | 522 | ··-·restrict_strategy |
| 523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 528 | --- | ||
| 529 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 530 | kind:·MachineConfig | ||
| 531 | spec: | ||
| 532 | ··config: | ||
| 533 | ····ignition: | ||
| 534 | ······version:·3.1.0 | ||
| 535 | ····systemd: | ||
| 536 | ······units: | ||
| 537 | ········-·name:·configure-crypto-policy.service | ||
| 538 | ··········enabled:·true | ||
| 539 | ··········contents:·| | ||
| 540 | ············[Unit] | ||
| 541 | ············Before=kubelet.service | ||
| 542 | ············[Service] | ||
| 543 | ············Type=oneshot | ||
| 544 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 545 | ············RemainAfterExit=yes | ||
| 546 | ············[Install] | ||
| 547 | ············WantedBy=multi-user.target | ||
| 548 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 548 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 549 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 549 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 550 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 550 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 551 | Severity: ···medium | 551 | Severity: ···medium |
| 552 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 552 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 553 | Identifiers:·CCE-83445-7 | 553 | Identifiers:·CCE-83445-7 |
| 554 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 554 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1552, 21 lines modified | Offset 1552, 18 lines modified | ||
| 1552 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1552 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1553 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1553 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1554 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 | 1554 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1555 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1555 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1556 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1556 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1557 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-211055 | 1557 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-211055 |
| 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule | 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule |
| 1559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1564 | 1560 | [customizations.services] | |
| 1561 | masked·=·["debug-shell"] | ||
| 1565 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1566 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1567 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1568 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1569 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1570 | #·Remediation·is·applicable·only·in·certain·platforms | 1567 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1571 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1568 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1584, 33 lines modified | Offset 1581, 14 lines modified | ||
| 1584 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1581 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1585 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1582 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1586 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1583 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1587 | else | 1584 | else |
| 1588 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1585 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1589 | fi | 1586 | fi |
| Max diff block lines reached; 131408/138050 bytes (95.19%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037f00:·3 | 00037f00:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17225, 236 lines modified | Offset 17225, 236 lines modified | ||
| 00043480:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 00043480:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 00043490:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 00043490:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 000434a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 000434a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 000434b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 000434b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 000434c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 000434c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 000434d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 000434d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 000434e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 000434e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 000434f0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 00043500:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00043510:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00043520:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00043530:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00043540:·2069·643d·2269·646d·3834·3036·223e·3c70···id="idm8406"><p | |||
| 00043550:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00043560:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 00043570:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 000434f0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 00043500:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00043510:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00043520:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00043530:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 00043540:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00043550:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00043560:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00043570:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00043580:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00043590:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000435a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000435b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000435c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000435d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 000435e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 000435f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00043600:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00043610:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00043620:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00043630:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 00043640:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 00043650:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00043660:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00043670:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00043680:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00043690:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 000436a0:·3430·3722·2074·6162·696e·6465·783d·2230··407"·tabindex="0 | |||
| 000436b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 000436c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 000436d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 000436e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 000436f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00043700:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00043710:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00043720:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00043730:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00043740:·7365·2220·6964·3d22·6964·6d38·3430·3722··se"·id="idm8407" | |||
| 00043750:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00043760:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00043770:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00043780:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00043790:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000437a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000437b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000437c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000437d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000437e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000437f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00043800:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00043810:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00043820:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00043830:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00043840:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 00043850:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 00043860:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 00043870:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 00043880:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 00043890:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 000438a0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 000438b0:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 000438c0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 000438d0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 000438e0:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 000438f0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 00043900:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 00043910:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 00043920:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 00043930:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 00043940:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 00043 | 00043580:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 00043 | 00043590:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 00043 | 000435a0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 00043 | 000435b0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 00043 | 000435c0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 00043 | 000435d0:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | ||
| 00043 | 000435e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 000435f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00043600:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00043610:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00043620:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00043630:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00043640:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 00043650:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00043660:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00043670:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00043680:·3d22·6964·6d38·3430·3722·3e3c·7461·626c··="idm8407"><tabl | |||
| 00043690:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 000436a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000436b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 000436c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 000436d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 000436e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000436f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| Max diff block lines reached; 2336310/2368794 bytes (98.63%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:9 | 48 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 574, 21 lines modified | Offset 574, 19 lines modified | ||
| 574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 575 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 575 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 577 | ·············_\x8c_\x8i_\x8s············6.1.1 | 577 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 578 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 578 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 579 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 579 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 580 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 580 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 586 | package | 582 | [[packages]] |
| 583 | name·=·"aide" | ||
| 584 | version·=·"*" | ||
| 587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 592 | #·Remediation·is·applicable·only·in·certain·platforms | 590 | #·Remediation·is·applicable·only·in·certain·platforms |
| 593 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 591 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 619, 38 lines modified | Offset 617, 40 lines modified | ||
| 619 | ··-·PCI-DSSv4-11.5.2 | 617 | ··-·PCI-DSSv4-11.5.2 |
| 620 | ··-·enable_strategy | 618 | ··-·enable_strategy |
| 621 | ··-·low_complexity | 619 | ··-·low_complexity |
| 622 | ··-·low_disruption | 620 | ··-·low_disruption |
| 623 | ··-·medium_severity | 621 | ··-·medium_severity |
| 624 | ··-·no_reboot_needed | 622 | ··-·no_reboot_needed |
| 625 | ··-·package_aide_installed | 623 | ··-·package_aide_installed |
| 626 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 627 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 628 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 629 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 630 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 631 | package·--add=aide | ||
| 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 633 | [[packages]] | ||
| 634 | name·=·"aide" | ||
| 635 | version·=·"*" | ||
| 636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 624 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 625 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 626 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 627 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 628 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 641 | include·install_aide | 629 | include·install_aide |
| 642 | class·install_aide·{ | 630 | class·install_aide·{ |
| 643 | ··package·{·'aide': | 631 | ··package·{·'aide': |
| 644 | ····ensure·=>·'installed', | 632 | ····ensure·=>·'installed', |
| 645 | ··} | 633 | ··} |
| 646 | } | 634 | } |
| 635 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 636 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 637 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 638 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 639 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 640 | package·install·aide | ||
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 646 | package·--add=aide | ||
| 647 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 647 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 648 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 648 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 649 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. | 649 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. |
| 650 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 650 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 651 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 651 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 672, 14 lines modified | Offset 672, 18 lines modified | ||
| 672 | ·············_\x8i_\x8s_\x8m······1446 | 672 | ·············_\x8i_\x8s_\x8m······1446 |
| 673 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 673 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 674 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 674 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 676 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 676 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 677 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 677 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 678 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 678 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 680 | [customizations] | ||
| 681 | fips·=·true | ||
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 682 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 680 | #·Remediation·is·applicable·only·in·certain·platforms | 683 | #·Remediation·is·applicable·only·in·certain·platforms |
| 681 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 684 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 682 | var_system_crypto_policy='FIPS' | 685 | var_system_crypto_policy='FIPS' |
| Offset 810, 18 lines modified | Offset 814, 14 lines modified | ||
| 810 | ··-·NIST-800-53-SC-13 | 814 | ··-·NIST-800-53-SC-13 |
| 811 | ··-·enable_fips_mode | 815 | ··-·enable_fips_mode |
| 812 | ··-·high_severity | 816 | ··-·high_severity |
| 813 | ··-·medium_complexity | 817 | ··-·medium_complexity |
| 814 | ··-·medium_disruption | 818 | ··-·medium_disruption |
| 815 | ··-·reboot_required | 819 | ··-·reboot_required |
| 816 | ··-·restrict_strategy | 820 | ··-·restrict_strategy |
| 817 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 818 | [customizations] | ||
| 819 | fips·=·true | ||
| 820 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 821 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 821 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 822 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 822 | ····*·GnuTLS·library | 823 | ····*·GnuTLS·library |
| Max diff block lines reached; 210724/217781 bytes (96.76%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037e50:·3 | 00037e50:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15582, 352 lines modified | Offset 15582, 352 lines modified | ||
| 0003cdd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003cdd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003cde0:·3839·3836·2220·7461·6269·6e64·6578·3d22··8986"·tabindex=" | 0003cde0:·3839·3836·2220·7461·6269·6e64·6578·3d22··8986"·tabindex=" | ||
| 0003cdf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003cdf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ce00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003ce00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ce10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ce10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ce20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ce20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ce30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ce30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ce40:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003ce50:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ce60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ce70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ce80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ce90:·2220·6964·3d22·6964·6d38·3938·3622·3e3c··"·id="idm8986">< | |||
| 0003cea0:·7072·653e·3c63·6f64·653e·0a5b·6375·7374··pre><code>.[cust | |||
| 0003ceb0:·6f6d·697a·6174·696f·6e73·5d0a·6669·7073··omizations].fips | |||
| 0003cec0:·203d·2074·7275·650a·3c2f·636f·6465·3e3c···=·true.</code>< | |||
| 0003ced0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003cee0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003cef0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003cf00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003cf10:·612d·7461·7267·6574·3d22·2369·646d·3839··a-target="#idm89 | |||
| 0003cf20:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | |||
| 0003cf30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003cf40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003cf50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003cf60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003cf70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c | 0003cf80:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003c | 0003cf90:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003c | 0003cfa0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003c | 0003cfb0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003c | 0003cfc0:·6522·2069·643d·2269·646d·3839·3837·223e··e"·id="idm8987"> | ||
| 0003c | 0003cfd0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003c | 0003cfe0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003c | 0003cff0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003 | 0003d000:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003 | 0003d010:·0a69·6620·2820·5b20·2120·2d66·202f·2e64··.if·(·[·!·-f·/.d | ||
| 0003d020:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003d030:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003d040:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003d050:·5d20·2661·6d70·3b26·616d·703b·2021·2028··]·&&·!·( | |||
| 0003d060:·205b·2022·247b·636f·6e74·6169·6e65·723a···[·"${container: | |||
| 0003d070:·2d7d·2220·3d3d·2022·6277·7261·702d·6f73··-}"·==·"bwrap-os | |||
| 0003d080:·6275·696c·6422·205d·2029·2029·2026·616d··build"·]·)·)·&am | |||
| 0003d090:·703b·2661·6d70·3b20·7b20·5b20·2120·2d66··p;&·{·[·!·-f | |||
| 0003 | 0003d0a0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | ||
| 0003 | 0003d0b0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | ||
| 0003c | 0003d0c0:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | ||
| 0003cf10:·7620·5d20·2661·6d70·3b26·616d·703b·2021··v·]·&&·! | |||
| 0003cf20:·2028·205b·2022·247b·636f·6e74·6169·6e65···(·[·"${containe | |||
| 0003cf30:·723a·2d7d·2220·3d3d·2022·6277·7261·702d··r:-}"·==·"bwrap- | |||
| 0003cf40:·6f73·6275·696c·6422·205d·2029·2029·2026··osbuild"·]·)·)·& | |||
| 0003cf50:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | |||
| 0003cf60:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003cf70:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003cf80:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003 | 0003d0d0:·656e·7620·5d3b·207d·3b20·7468·656e·0a0a··env·];·};·then.. | ||
| 0003 | 0003d0e0:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 0003 | 0003d0f0:·6f5f·706f·6c69·6379·3d27·3c61·6262·7220··o_policy='<abbr· | ||
| 0003 | 0003d100:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | ||
| 0003 | 0003d110:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | ||
| 0003cfe0:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003cff0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003d000:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003d010:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003d020:·3e46·4950·533a·4f53·5050·3c2f·6162·6272··>FIPS:OSPP</abbr | |||
| 0003d030:·3e27·0a0a·0a66·6970·732d·6d6f·6465·2d73··>'...fips-mode-s | |||
| 0003d040:·6574·7570·202d·2d65·6e61·626c·650a·0a73··etup·--enable..s | |||
| 0003d050:·7464·6572·725f·6f66·5f63·616c·6c3d·2428··tderr_of_call=$( | |||
| 0003d060:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 0003d070:·6c69·6369·6573·202d·2d73·6574·2024·7b76··licies·--set·${v | |||
| 0003d080:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003d090:·5f70·6f6c·6963·797d·2032·2667·743b·2661··_policy}·2>&a | |||
| 0003d0a0:·6d70·3b31·2026·6774·3b20·2f64·6576·2f6e··mp;1·>·/dev/n | |||
| 0003d0b0:·756c·6c29·0a72·633d·243f·0a0a·6966·2074··ull).rc=$?..if·t | |||
| 0003d0c0:·6573·7420·2224·7263·2220·3d20·3132·373b··est·"$rc"·=·127; | |||
| 0003d0d0:·2074·6865·6e0a·0965·6368·6f20·2224·7374···then..echo·"$st | |||
| 0003d0e0:·6465·7272·5f6f·665f·6361·6c6c·2220·2667··derr_of_call"·&g | |||
| 0003d0f0:·743b·2661·6d70·3b32·0a09·6563·686f·2022··t;&2..echo·" | |||
| 0003d100:·4d61·6b65·2073·7572·6520·7468·6174·2074··Make·sure·that·t | |||
| 0003d110:·6865·2073·6372·6970·7420·6973·2069·6e73··he·script·is·ins | |||
| 0003d120:·7461·6c6c·6564·206f·6e20·7468·6520·7265··talled·on·the·re | |||
| 0003d130:·6d65·6469·6174·6564·2073·7973·7465·6d2e··mediated·system. | |||
| 0003d140:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003d150:·686f·2022·5365·6520·6f75·7470·7574·206f··ho·"See·output·o | |||
| 0003d160:·6620·7468·6520·2764·6e66·2070·726f·7669··f·the·'dnf·provi | |||
| 0003d170:·6465·7320·7570·6461·7465·2d63·7279·7074··des·update-crypt | |||
| 0003d180:·6f2d·706f·6c69·6369·6573·2720·636f·6d6d··o-policies'·comm | |||
| 0003d190:·616e·6422·2026·6774·3b26·616d·703b·320a··and"·>&2. | |||
| 0003d1a0:·0965·6368·6f20·2274·6f20·7365·6520·7768··.echo·"to·see·wh | |||
| 0003d1b0:·6174·2070·6163·6b61·6765·2074·6f20·2872··at·package·to·(r | |||
| 0003d1c0:·6529·696e·7374·616c·6c22·2026·6774·3b26··e)install"·>& | |||
| 0003d1d0:·616d·703b·320a·0a09·6661·6c73·6520·2023··amp;2...false··# | |||
| 0003d1e0:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 0003d1f0:·6f72·2063·6f64·650a·656c·6966·2074·6573··or·code.elif·tes | |||
| 0003d200:·7420·2224·7263·2220·213d·2030·3b20·7468··t·"$rc"·!=·0;·th | |||
| 0003d210:·656e·0a09·6563·686f·2022·4572·726f·7220··en..echo·"Error· | |||
| 0003d220:·696e·766f·6b69·6e67·2074·6865·2075·7064··invoking·the·upd | |||
| 0003d230:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 0003d240:·6965·7320·7363·7269·7074·3a20·2473·7464··ies·script:·$std | |||
| 0003d250:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 0003d260:·3b26·616d·703b·320a·0966·616c·7365·2020··;&2..false·· | |||
| 0003d270:·2320·656e·6420·7769·7468·2061·6e20·6572··#·end·with·an·er | |||
| 0003d280:·726f·7220·636f·6465·0a66·690a·0a65·6c73··ror·code.fi..els | |||
| 0003d290:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003d2a0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003d2b0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003d2c0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003d2d0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003d2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| Max diff block lines reached; 2681350/2729842 bytes (98.22%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 199, 14 lines modified | Offset 199, 18 lines modified | ||
| 199 | ·············_\x8i_\x8s_\x8m······1446 | 199 | ·············_\x8i_\x8s_\x8m······1446 |
| 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | [customizations] | ||
| 208 | fips·=·true | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | 210 | #·Remediation·is·applicable·only·in·certain·platforms |
| 208 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 211 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 209 | var_system_crypto_policy='FIPS:OSPP' | 212 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 337, 18 lines modified | Offset 341, 14 lines modified | ||
| 337 | ··-·NIST-800-53-SC-13 | 341 | ··-·NIST-800-53-SC-13 |
| 338 | ··-·enable_fips_mode | 342 | ··-·enable_fips_mode |
| 339 | ··-·high_severity | 343 | ··-·high_severity |
| 340 | ··-·medium_complexity | 344 | ··-·medium_complexity |
| 341 | ··-·medium_disruption | 345 | ··-·medium_disruption |
| 342 | ··-·reboot_required | 346 | ··-·reboot_required |
| 343 | ··-·restrict_strategy | 347 | ··-·restrict_strategy |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 345 | [customizations] | ||
| 346 | fips·=·true | ||
| 347 | Group ·System·Cryptographic·Policies· Group·contains·4·rules | 348 | Group ·System·Cryptographic·Policies· Group·contains·4·rules |
| 348 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 349 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 349 | ····*·GnuTLS·library | 350 | ····*·GnuTLS·library |
| 350 | ····*·OpenSSL·library | 351 | ····*·OpenSSL·library |
| 351 | ····*·NSS·library | 352 | ····*·NSS·library |
| 352 | ····*·OpenJDK | 353 | ····*·OpenJDK |
| 353 | ····*·Libkrb5 | 354 | ····*·Libkrb5 |
| Offset 362, 21 lines modified | Offset 362, 19 lines modified | ||
| 362 | Severity: ···medium | 362 | Severity: ···medium |
| 363 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 363 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 364 | Identifiers:·CCE-83442-4 | 364 | Identifiers:·CCE-83442-4 |
| 365 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 365 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 366 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 366 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 | 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 |
| 368 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 368 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 374 | package | 370 | [[packages]] |
| 371 | name·=·"crypto-policies" | ||
| 372 | version·=·"*" | ||
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 380 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 378 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 396, 38 lines modified | Offset 394, 40 lines modified | ||
| 396 | ··-·DISA-STIG-RHEL-09-672010 | 394 | ··-·DISA-STIG-RHEL-09-672010 |
| 397 | ··-·enable_strategy | 395 | ··-·enable_strategy |
| 398 | ··-·low_complexity | 396 | ··-·low_complexity |
| 399 | ··-·low_disruption | 397 | ··-·low_disruption |
| 400 | ··-·medium_severity | 398 | ··-·medium_severity |
| 401 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 402 | ··-·package_crypto-policies_installed | 400 | ··-·package_crypto-policies_installed |
| 403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 408 | package·--add=crypto-policies | ||
| 409 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 410 | [[packages]] | ||
| 411 | name·=·"crypto-policies" | ||
| 412 | version·=·"*" | ||
| 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 414 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 402 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 415 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 403 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 416 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 404 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 417 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 405 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 418 | include·install_crypto-policies | 406 | include·install_crypto-policies |
| 419 | class·install_crypto-policies·{ | 407 | class·install_crypto-policies·{ |
| 420 | ··package·{·'crypto-policies': | 408 | ··package·{·'crypto-policies': |
| 421 | ····ensure·=>·'installed', | 409 | ····ensure·=>·'installed', |
| 422 | ··} | 410 | ··} |
| 423 | } | 411 | } |
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 413 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 414 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 415 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 416 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 417 | package·install·crypto-policies | ||
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 423 | package·--add=crypto-policies | ||
| 424 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 424 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 425 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 425 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 426 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 426 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| Max diff block lines reached; 354294/361208 bytes (98.09%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e40:·2032·3032·3 | 00037e40:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 16527, 237 lines modified | Offset 16527, 237 lines modified | ||
| 000408e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000408e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000408f0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 000408f0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 00040900:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00040900:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00040910:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00040910:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00040920:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00040920:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00040930:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00040930:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00040940:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00040940:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00040950:·5265·6d65·6469·6174·696f·6e20· | 00040950:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00040960:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 00040960:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00040970:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00040980:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00040990:·6522·2069·643d·2269·646d·3834·3036·223e··e"·id="idm8406"> | |||
| 000409a0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000409b0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000409c0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000409d0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000409e0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000409f0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00040a00:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040a10:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040a20:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040a30:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00040a40:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00040a50:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00040a60:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00040a70:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00040a80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00040a90:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 00040aa0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 00040ab0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00040ac0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00040ad0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00040ae0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00040af0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00040b00:·2369·646d·3834·3037·2220·7461·6269·6e64··#idm8407"·tabind | |||
| 00040b10:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00040b20:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00040b30:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00040b40:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00040b50:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00040b60:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 00040b70:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00040b80:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040b90:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040ba0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040bb0:·3834·3037·223e·3c74·6162·6c65·2063·6c61··8407"><table·cla | |||
| 00040bc0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040bd0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040be0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040bf0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040c00:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040c10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040c20:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040c30:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040c40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040c50:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040c60:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040c70:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00040c80:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00040c90:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00040ca0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 00040cb0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 00040cc0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 00040cd0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 00040ce0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 00040cf0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 00040d00:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 00040d10:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 00040d20:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 00040d30:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 00040d40:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 00040d50:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 00040d60:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 00040d70:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 00040d80:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 00040d90:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 00040da0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 00040db0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 00040dc0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040dd0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040de0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040df0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040e00:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 00040e10:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | |||
| 00040e20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040e30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040e40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040e50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040e60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040e70:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00040 | 00040970:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 00040 | 00040980:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 00040 | 00040990:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 00040 | 000409a0:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | ||
| 000409b0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 000409c0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000409d0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 000409e0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00040ec0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 00040ed0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040ee0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040ef0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040f00:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040f10:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040f20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040f30:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040f40:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040f50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040f60:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040f70:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| Max diff block lines reached; 2527743/2560227 bytes (98.73%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 426, 21 lines modified | Offset 426, 19 lines modified | ||
| 426 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 426 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 428 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 428 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 429 | ·············_\x8c_\x8i_\x8s············6.1.1 | 429 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 430 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 430 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 431 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 431 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 432 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 432 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 438 | package | 434 | [[packages]] |
| 435 | name·=·"aide" | ||
| 436 | version·=·"*" | ||
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 444 | #·Remediation·is·applicable·only·in·certain·platforms | 442 | #·Remediation·is·applicable·only·in·certain·platforms |
| 445 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 443 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 471, 38 lines modified | Offset 469, 40 lines modified | ||
| 471 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 472 | ··-·enable_strategy | 470 | ··-·enable_strategy |
| 473 | ··-·low_complexity | 471 | ··-·low_complexity |
| 474 | ··-·low_disruption | 472 | ··-·low_disruption |
| 475 | ··-·medium_severity | 473 | ··-·medium_severity |
| 476 | ··-·no_reboot_needed | 474 | ··-·no_reboot_needed |
| 477 | ··-·package_aide_installed | 475 | ··-·package_aide_installed |
| 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 483 | package·--add=aide | ||
| 484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 485 | [[packages]] | ||
| 486 | name·=·"aide" | ||
| 487 | version·=·"*" | ||
| 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 493 | include·install_aide | 481 | include·install_aide |
| 494 | class·install_aide·{ | 482 | class·install_aide·{ |
| 495 | ··package·{·'aide': | 483 | ··package·{·'aide': |
| 496 | ····ensure·=>·'installed', | 484 | ····ensure·=>·'installed', |
| 497 | ··} | 485 | ··} |
| 498 | } | 486 | } |
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 492 | package·install·aide | ||
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 498 | package·--add=aide | ||
| 499 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 499 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 500 | Run·the·following·command·to·generate·a·new·database: | 500 | Run·the·following·command·to·generate·a·new·database: |
| 501 | $·sudo·/usr/sbin/aide·--init | 501 | $·sudo·/usr/sbin/aide·--init |
| 502 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 502 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 503 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 503 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 504 | To·initiate·a·manual·check,·run·the·following·command: | 504 | To·initiate·a·manual·check,·run·the·following·command: |
| 505 | $·sudo·/usr/sbin/aide·--check | 505 | $·sudo·/usr/sbin/aide·--check |
| Offset 836, 39 lines modified | Offset 836, 14 lines modified | ||
| 836 | » echo·"to·see·what·package·to·(re)install"·>&2 | 836 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 837 | » false··#·end·with·an·error·code | 837 | » false··#·end·with·an·error·code |
| 838 | elif·test·"$rc"·!=·0;·then | 838 | elif·test·"$rc"·!=·0;·then |
| 839 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 839 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 840 | » false··#·end·with·an·error·code | 840 | » false··#·end·with·an·error·code |
| 841 | fi | 841 | fi |
| 842 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 843 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 844 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 845 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 846 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 847 | --- | ||
| 848 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 849 | kind:·MachineConfig | ||
| 850 | spec: | ||
| 851 | ··config: | ||
| 852 | ····ignition: | ||
| 853 | ······version:·3.1.0 | ||
| 854 | ····systemd: | ||
| 855 | ······units: | ||
| 856 | ········-·name:·configure-crypto-policy.service | ||
| 857 | ··········enabled:·true | ||
| 858 | ··········contents:·| | ||
| 859 | ············[Unit] | ||
| 860 | ············Before=kubelet.service | ||
| 861 | ············[Service] | ||
| 862 | ············Type=oneshot | ||
| 863 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 864 | ············RemainAfterExit=yes | ||
| 865 | ············[Install] | ||
| 866 | ············WantedBy=multi-user.target | ||
| 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 842 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 227456/233171 bytes (97.55%) of diff not shown. | |||
| Offset 14311, 15 lines modified | Offset 14311, 15 lines modified | ||
| 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037ed0:·7320·6f66·2032·3032·3 | 00037ed0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15153, 237 lines modified | Offset 15153, 237 lines modified | ||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b380:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b390:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b3b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b3c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b380:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b390:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3b0:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b3c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b3d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b3e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b3f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b400:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b410:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b420:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b430:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b440:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b450:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b460:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b470:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b480:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b490:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b4a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b4b0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003b4c0:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003b4d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b4e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b4f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b500:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b510:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b520:·3d22·2369·646d·3834·3037·2220·7461·6269··="#idm8407"·tabi | |||
| 0003b530:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b540:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b550:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b560:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b570:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b580:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003b590:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3834·3037·223e·3c74·6162·6c65·2063··dm8407"><table·c | |||
| 0003b5e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b600:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b610:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b620:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b630:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b640:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b650:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b670:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b680:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b690:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b6a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b6b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b | 0003b3d0:·3430·3622·3e3c·7072·653e·3c63·6f64·653e··406"><pre><code> | ||
| 0003b3e0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b3f0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b400:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b6d0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b6e0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b6f0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b700:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003b710:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003b720:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003b730:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003b740:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 0003b750:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003b760:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003b770:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 0003b780:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003b790:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b7a0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b7b0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b7c0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b7d0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b | 0003b410:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003b420:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003b430:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003b440:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003b450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b | 0003b460:·3834·3037·2220·7461·6269·6e64·6578·3d22··8407"·tabindex=" | ||
| 0003b | 0003b470:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b | 0003b480:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b | 0003b490:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b | 0003b4a0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b | 0003b4b0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b4c0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b4d0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b4e0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b4f0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b500:·7073·6522·2069·643d·2269·646d·3834·3037··pse"·id="idm8407 | |||
| 0003b510:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b520:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b890:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b8a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b8b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b8c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b8d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b8e0:·3430·3822·3e3c·7461·626c·6520·636c·6173··408"><table·clas | |||
| 0003b8f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| Max diff block lines reached; 4275081/4307565 bytes (99.25%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:redhat:enterprise_linux:9 | 47 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 21 lines modified | Offset 109, 19 lines modified | ||
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 111 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 112 | ·············_\x8c_\x8i_\x8s············6.1.1 | 112 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 114 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package | 117 | [[packages]] |
| 118 | name·=·"aide" | ||
| 119 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | #·Remediation·is·applicable·only·in·certain·platforms | 125 | #·Remediation·is·applicable·only·in·certain·platforms |
| 128 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 154, 38 lines modified | Offset 152, 40 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 154 | ··-·low_complexity |
| 157 | ··-·low_disruption | 155 | ··-·low_disruption |
| 158 | ··-·medium_severity | 156 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·--add=aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | include·install_aide | 164 | include·install_aide |
| 177 | class·install_aide·{ | 165 | class·install_aide·{ |
| 178 | ··package·{·'aide': | 166 | ··package·{·'aide': |
| 179 | ····ensure·=>·'installed', | 167 | ····ensure·=>·'installed', |
| 180 | ··} | 168 | ··} |
| 181 | } | 169 | } |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·install·aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 186 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 186 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 187 | To·initiate·a·manual·check,·run·the·following·command: | 187 | To·initiate·a·manual·check,·run·the·following·command: |
| 188 | $·sudo·/usr/sbin/aide·--check | 188 | $·sudo·/usr/sbin/aide·--check |
| Offset 1997, 14 lines modified | Offset 1997, 18 lines modified | ||
| 1997 | ·············_\x8i_\x8s_\x8m······1446 | 1997 | ·············_\x8i_\x8s_\x8m······1446 |
| 1998 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1998 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1999 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1999 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 2000 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 2000 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 2001 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 2001 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 2002 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 2002 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 2003 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 2003 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2005 | [customizations] | ||
| 2006 | fips·=·true | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2007 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2005 | #·Remediation·is·applicable·only·in·certain·platforms | 2008 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2006 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 2009 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 2007 | var_system_crypto_policy='FIPS' | 2010 | var_system_crypto_policy='FIPS' |
| Offset 2135, 18 lines modified | Offset 2139, 14 lines modified | ||
| 2135 | ··-·NIST-800-53-SC-13 | 2139 | ··-·NIST-800-53-SC-13 |
| 2136 | ··-·enable_fips_mode | 2140 | ··-·enable_fips_mode |
| 2137 | ··-·high_severity | 2141 | ··-·high_severity |
| 2138 | ··-·medium_complexity | 2142 | ··-·medium_complexity |
| 2139 | ··-·medium_disruption | 2143 | ··-·medium_disruption |
| 2140 | ··-·reboot_required | 2144 | ··-·reboot_required |
| 2141 | ··-·restrict_strategy | 2145 | ··-·restrict_strategy |
| 2142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2143 | [customizations] | ||
| 2144 | fips·=·true | ||
| 2145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2146 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 2146 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 2147 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 2147 | fips-mode-setup·--enable | 2148 | fips-mode-setup·--enable |
| Max diff block lines reached; 474091/480642 bytes (98.64%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038050:·2032·3032·3 | 00038050:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15172, 236 lines modified | Offset 15172, 236 lines modified | ||
| 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4a0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b4b0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b4c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b4d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b4e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b4f0:·2069·643d·2269·646d·3834·3036·223e·3c70···id="idm8406"><p | |||
| 0003b500:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b510:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b520:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b4a0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003b4b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b4c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b4d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b4e0:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b4f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b500:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b510:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b520:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b530:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b540:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b550:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b560:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b570:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b580:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b590:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b5a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b5b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b5c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b5d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b5e0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003b5f0:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003b600:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b610:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b620:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b630:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b640:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003b650:·3430·3722·2074·6162·696e·6465·783d·2230··407"·tabindex="0 | |||
| 0003b660:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b670:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b680:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b690:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b6a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b6b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b6c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b6d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6f0:·7365·2220·6964·3d22·6964·6d38·3430·3722··se"·id="idm8407" | |||
| 0003b700:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b710:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b720:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b730:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b740:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b750:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b770:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b780:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b790:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b7a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b7b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b7c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b7d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b7e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b7f0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b800:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b810:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b820:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b830:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b840:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b850:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b860:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b870:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b880:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b890:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003b8a0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b8b0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b8c0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b8d0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b8e0:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b8f0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b | 0003b530:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b540:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b550:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b | 0003b560:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b570:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b580:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | ||
| 0003b | 0003b590:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b | 0003b5a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b | 0003b5b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b | 0003b5c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b5d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b5e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b5f0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b600:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b610:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b620:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b630:·3d22·6964·6d38·3430·3722·3e3c·7461·626c··="idm8407"><tabl | |||
| 0003b640:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b650:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b660:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b670:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b680:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b690:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b6a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b6b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| Max diff block lines reached; 4221684/4254030 bytes (99.24%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 52 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 52 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:9 | 53 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 21 lines modified | Offset 114, 19 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ·············_\x8c_\x8i_\x8s············6.1.1 | 117 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package | 122 | [[packages]] |
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 133 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 131 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 159, 38 lines modified | Offset 157, 40 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 159 | ··-·low_complexity |
| 162 | ··-·low_disruption | 160 | ··-·low_disruption |
| 163 | ··-·medium_severity | 161 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | include·install_aide | 169 | include·install_aide |
| 182 | class·install_aide·{ | 170 | class·install_aide·{ |
| 183 | ··package·{·'aide': | 171 | ··package·{·'aide': |
| 184 | ····ensure·=>·'installed', | 172 | ····ensure·=>·'installed', |
| 185 | ··} | 173 | ··} |
| 186 | } | 174 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·install·aide | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=aide | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | Run·the·following·command·to·generate·a·new·database: | 188 | Run·the·following·command·to·generate·a·new·database: |
| 189 | $·sudo·/usr/sbin/aide·--init | 189 | $·sudo·/usr/sbin/aide·--init |
| 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 191 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 191 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 192 | To·initiate·a·manual·check,·run·the·following·command: | 192 | To·initiate·a·manual·check,·run·the·following·command: |
| 193 | $·sudo·/usr/sbin/aide·--check | 193 | $·sudo·/usr/sbin/aide·--check |
| Offset 2002, 14 lines modified | Offset 2002, 18 lines modified | ||
| 2002 | ·············_\x8i_\x8s_\x8m······1446 | 2002 | ·············_\x8i_\x8s_\x8m······1446 |
| 2003 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 2003 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 2004 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 2004 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 2005 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 2005 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 2006 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 2006 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 2007 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 2007 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 2008 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 2008 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 2009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2010 | [customizations] | ||
| 2011 | fips·=·true | ||
| 2009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2012 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2010 | #·Remediation·is·applicable·only·in·certain·platforms | 2013 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2011 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 2014 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 2012 | var_system_crypto_policy='FIPS' | 2015 | var_system_crypto_policy='FIPS' |
| Offset 2140, 18 lines modified | Offset 2144, 14 lines modified | ||
| 2140 | ··-·NIST-800-53-SC-13 | 2144 | ··-·NIST-800-53-SC-13 |
| 2141 | ··-·enable_fips_mode | 2145 | ··-·enable_fips_mode |
| 2142 | ··-·high_severity | 2146 | ··-·high_severity |
| 2143 | ··-·medium_complexity | 2147 | ··-·medium_complexity |
| 2144 | ··-·medium_disruption | 2148 | ··-·medium_disruption |
| 2145 | ··-·reboot_required | 2149 | ··-·reboot_required |
| 2146 | ··-·restrict_strategy | 2150 | ··-·restrict_strategy |
| 2147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2148 | [customizations] | ||
| 2149 | fips·=·true | ||
| 2150 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2151 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8Se\x8et\x8t·k\x8ke\x8er\x8rn\x8ne\x8el\x8l·p\x8pa\x8ar\x8ra\x8am\x8me\x8et\x8te\x8er\x8r·'\x8'c\x8cr\x8ry\x8yp\x8pt\x8to\x8o.\x8.f\x8fi\x8ip\x8ps\x8s_\x8_e\x8en\x8na\x8ab\x8bl\x8le\x8ed\x8d'\x8'·t\x8to\x8o·1\x81·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 2151 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: | 2152 | System·running·in·FIPS·mode·is·indicated·by·kernel·parameter·'crypto.fips_enabled'.·This·parameter·should·be·set·to·1·in·FIPS·mode.·To·enable·FIPS·mode,·run·the·following·command: |
| 2152 | fips-mode-setup·--enable | 2153 | fips-mode-setup·--enable |
| Max diff block lines reached; 467917/474481 bytes (98.62%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e30:·6620·3230·323 | 00037e30:·6620·3230·3236·2d30·312d·3238·290a·2020··f·2026-01-28).·· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 16392, 200 lines modified | Offset 16392, 200 lines modified | ||
| 00040070:·2d74·6172·6765·743d·2223·6964·6d31·3932··-target="#idm192 | 00040070:·2d74·6172·6765·743d·2223·6964·6d31·3932··-target="#idm192 | ||
| 00040080:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00040080:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00040090:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00040090:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000400a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000400a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000400b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000400b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 000400c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 000400c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 000400d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 000400d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 000400e0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 000400f0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 000400e0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 000400f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040100:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040110:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040120:·2220·6964·3d22·6964·6d31·3932·3022·3e3c··"·id="idm1920">< | |||
| 00040130:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040140:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00040150:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00040160:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00040170:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00040180:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00040190:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000401a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 000401b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000401c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000401d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 000401e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000401f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00040200:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00040210:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00040220:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 00040230:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 00040240:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 00040250:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 00040260:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 00040270:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 00040280:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 00040290:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 000402a0:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 000402b0:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 000402c0:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 000402d0:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 000402e0:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 000402f0:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 00040300:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 00040310:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 00040320:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 00040330:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040340:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040350:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00040360:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00040370:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00040380:·743d·2223·6964·6d31·3932·3122·2074·6162··t="#idm1921"·tab | |||
| 00040390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 000403a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 000403b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 000403c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 000403d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 000403e0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 000403f0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00040 | 00040100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00040 | 00040110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00040 | 00040120:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00040 | 00040130:·643d·2269·646d·3139·3230·223e·3c70·7265··d="idm1920"><pre | ||
| 00040440:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040450:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040460:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040470:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040480:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00040490:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000404a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00040 | 00040140:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 00040150:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 00040160:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 00040170:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040180:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040190:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000401a0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000401b0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000401c0:·743d·2223·6964·6d31·3932·3122·2074·6162··t="#idm1921"·tab | |||
| 000401d0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 000401e0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 000401f0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040200:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040210:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040220:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00040230:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00040240:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040250:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040260:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040270:·6964·6d31·3932·3122·3e3c·7461·626c·6520··idm1921"><table· | |||
| 00040280:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00040290:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000402a0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000402b0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000402c0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00040 | 000402d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 000402e0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 000402f0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040300:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040310:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040320:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040330:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040340:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00040350:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040360:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040370:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 00040380:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 00040390:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 000403a0:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 000403b0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 000403c0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| Max diff block lines reached; 271441/298819 bytes (90.84%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ··············(RHVH) | 39 | ··············(RHVH) |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 409, 14 lines modified | Offset 409, 19 lines modified | ||
| 409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 410 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 410 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 417 | [[packages]] | ||
| 418 | name·=·"aide" | ||
| 419 | version·=·"*" | ||
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 420 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 421 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 422 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 423 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 424 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 421 | #·Remediation·is·applicable·only·in·certain·platforms | 425 | #·Remediation·is·applicable·only·in·certain·platforms |
| 422 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 426 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 445, 38 lines modified | Offset 450, 33 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 450 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·enable_strategy | 451 | ··-·enable_strategy |
| 447 | ··-·low_complexity | 452 | ··-·low_complexity |
| 448 | ··-·low_disruption | 453 | ··-·low_disruption |
| 449 | ··-·medium_severity | 454 | ··-·medium_severity |
| 450 | ··-·no_reboot_needed | 455 | ··-·no_reboot_needed |
| 451 | ··-·package_aide_installed | 456 | ··-·package_aide_installed |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 457 | package·--add=aide | ||
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 459 | [[packages]] | ||
| 460 | name·=·"aide" | ||
| 461 | version·=·"*" | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 467 | include·install_aide | 462 | include·install_aide |
| 468 | class·install_aide·{ | 463 | class·install_aide·{ |
| 469 | ··package·{·'aide': | 464 | ··package·{·'aide': |
| 470 | ····ensure·=>·'installed', | 465 | ····ensure·=>·'installed', |
| 471 | ··} | 466 | ··} |
| 472 | } | 467 | } |
| 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 473 | package·--add=aide | ||
| 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 474 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 474 | Run·the·following·command·to·generate·a·new·database: | 475 | Run·the·following·command·to·generate·a·new·database: |
| 475 | $·sudo·/usr/sbin/aide·--init | 476 | $·sudo·/usr/sbin/aide·--init |
| 476 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 477 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 477 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 478 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 478 | To·initiate·a·manual·check,·run·the·following·command: | 479 | To·initiate·a·manual·check,·run·the·following·command: |
| 479 | $·sudo·/usr/sbin/aide·--check | 480 | $·sudo·/usr/sbin/aide·--check |
| Offset 6870, 14 lines modified | Offset 6870, 19 lines modified | ||
| 6870 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. | 6870 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. |
| 6871 | Severity: ··medium | 6871 | Severity: ··medium |
| 6872 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed | 6872 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed |
| 6873 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 | 6873 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 |
| 6874 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 6874 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 6875 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 6875 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 6876 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 | 6876 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 |
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6878 | [[packages]] | ||
| 6879 | name·=·"opensc" | ||
| 6880 | version·=·"*" | ||
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 6881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 6878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6882 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6883 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6884 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 6885 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 6882 | #·Remediation·is·applicable·only·in·certain·platforms | 6886 | #·Remediation·is·applicable·only·in·certain·platforms |
| 6883 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 6887 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 6903, 48 lines modified | Offset 6908, 48 lines modified | ||
| 6903 | ··-·NIST-800-53-CM-6(a) | 6908 | ··-·NIST-800-53-CM-6(a) |
| 6904 | ··-·enable_strategy | 6909 | ··-·enable_strategy |
| 6905 | ··-·low_complexity | 6910 | ··-·low_complexity |
| 6906 | ··-·low_disruption | 6911 | ··-·low_disruption |
| 6907 | ··-·medium_severity | 6912 | ··-·medium_severity |
| 6908 | ··-·no_reboot_needed | 6913 | ··-·no_reboot_needed |
| 6909 | ··-·package_opensc_installed | 6914 | ··-·package_opensc_installed |
| 6910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6911 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 6912 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 6913 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 6914 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 6915 | package·--add=opensc | ||
| 6916 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6917 | [[packages]] | ||
| 6918 | name·=·"opensc" | ||
| 6919 | version·=·"*" | ||
| 6920 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 6915 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 6921 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6916 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6922 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6917 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6923 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6918 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6924 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 6919 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 6925 | include·install_opensc | 6920 | include·install_opensc |
| Max diff block lines reached; 34168/40331 bytes (84.72%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00037e50:·3 | 00037e50:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17050, 201 lines modified | Offset 17050, 201 lines modified | ||
| 00042990:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00042990:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000429a0:·646d·3139·3230·2220·7461·6269·6e64·6578··dm1920"·tabindex | 000429a0:·646d·3139·3230·2220·7461·6269·6e64·6578··dm1920"·tabindex | ||
| 000429b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000429b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000429c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000429c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000429d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000429d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000429e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000429e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000429f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000429f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00042a00:·6d65·6469·6174·696f·6e20· | 00042a00:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00042a10:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00042a10:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00042a20:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042a30:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042a40:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 00042a50:·3230·223e·3c74·6162·6c65·2063·6c61·7373··20"><table·class | |||
| 00042a60:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00042a70:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00042a80:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00042a90:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00042aa0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00042ab0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00042ac0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00042ad0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00042ae0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00042af0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00042b00:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00042b10:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00042b20:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00042b30:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00042b40:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 00042b50:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 00042b60:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 00042b70:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 00042b80:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 00042b90:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 00042ba0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 00042bb0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 00042bc0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 00042bd0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 00042be0:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 00042bf0:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 00042c00:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 00042c10:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 00042c20:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 00042c30:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 00042c40:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 00042c50:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 00042c60:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00042c70:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00042c80:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00042c90:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00042ca0:·7461·7267·6574·3d22·2369·646d·3139·3231··target="#idm1921 | |||
| 00042cb0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00042cc0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042cd0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042ce0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042cf0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042d00:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042d10:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00042 | 00042a20:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 00042 | 00042a30:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00042 | 00042a40:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00042 | 00042a50:·7365·2220·6964·3d22·6964·6d31·3932·3022··se"·id="idm1920" | ||
| 00042a60:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 00042a70:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00042a80:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 00042a90:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 00042aa0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00042ab0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00042d60:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00042d70:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00042d80:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042d90:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042da0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042db0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00042dc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042dd0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00042de0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00042df0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00042e00:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00042e10:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00042e20:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00042e30:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00042e40:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00042e50:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00042e60:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 00042e70:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 00042e80:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 00042e90:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 00042ea0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 00042eb0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00042ec0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00042ed0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00042ee0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00042ef0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 00042f00:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 00042f10:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 00042f20:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00042f30:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 00042f40:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 00042f50:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 00042f60:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 00042f70:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 00042f80:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 00042f90:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 00042fa0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 00042fb0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00042fc0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00042fd0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 00042fe0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00042ff0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| Max diff block lines reached; 903606/931260 bytes (97.03%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Virtualization·Host·(RHVH) | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Virtualization·Host·(RHVH) |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 41 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 42 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 42 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 552, 14 lines modified | Offset 552, 19 lines modified | ||
| 552 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 552 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 553 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 553 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 554 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 554 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 556 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 556 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 557 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 557 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 560 | [[packages]] | ||
| 561 | name·=·"aide" | ||
| 562 | version·=·"*" | ||
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 564 | #·Remediation·is·applicable·only·in·certain·platforms | 568 | #·Remediation·is·applicable·only·in·certain·platforms |
| 565 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 569 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 588, 38 lines modified | Offset 593, 33 lines modified | ||
| 588 | ··-·PCI-DSSv4-11.5.2 | 593 | ··-·PCI-DSSv4-11.5.2 |
| 589 | ··-·enable_strategy | 594 | ··-·enable_strategy |
| 590 | ··-·low_complexity | 595 | ··-·low_complexity |
| 591 | ··-·low_disruption | 596 | ··-·low_disruption |
| 592 | ··-·medium_severity | 597 | ··-·medium_severity |
| 593 | ··-·no_reboot_needed | 598 | ··-·no_reboot_needed |
| 594 | ··-·package_aide_installed | 599 | ··-·package_aide_installed |
| 595 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 596 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 597 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 598 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 599 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 600 | package·--add=aide | ||
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 602 | [[packages]] | ||
| 603 | name·=·"aide" | ||
| 604 | version·=·"*" | ||
| 605 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 606 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 601 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 607 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 602 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 608 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 603 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 609 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 604 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 610 | include·install_aide | 605 | include·install_aide |
| 611 | class·install_aide·{ | 606 | class·install_aide·{ |
| 612 | ··package·{·'aide': | 607 | ··package·{·'aide': |
| 613 | ····ensure·=>·'installed', | 608 | ····ensure·=>·'installed', |
| 614 | ··} | 609 | ··} |
| 615 | } | 610 | } |
| 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 616 | package·--add=aide | ||
| 616 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 617 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 617 | Run·the·following·command·to·generate·a·new·database: | 618 | Run·the·following·command·to·generate·a·new·database: |
| 618 | $·sudo·/usr/sbin/aide·--init | 619 | $·sudo·/usr/sbin/aide·--init |
| 619 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 620 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 620 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 621 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 621 | To·initiate·a·manual·check,·run·the·following·command: | 622 | To·initiate·a·manual·check,·run·the·following·command: |
| 622 | $·sudo·/usr/sbin/aide·--check | 623 | $·sudo·/usr/sbin/aide·--check |
| Offset 1300, 14 lines modified | Offset 1300, 18 lines modified | ||
| 1300 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1300 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1301 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1301 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1302 | ············_\x8i_\x8s_\x8m······1446 | 1302 | ············_\x8i_\x8s_\x8m······1446 |
| 1303 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1303 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1304 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1304 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1305 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1305 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1308 | [customizations] | ||
| 1309 | fips·=·true | ||
| 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1308 | #·Remediation·is·applicable·only·in·certain·platforms | 1311 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1309 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1312 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1310 | var_system_crypto_policy='FIPS:OSPP' | 1313 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 1430, 18 lines modified | Offset 1434, 14 lines modified | ||
| 1430 | ··-·NIST-800-53-SC-13 | 1434 | ··-·NIST-800-53-SC-13 |
| 1431 | ··-·enable_fips_mode | 1435 | ··-·enable_fips_mode |
| 1432 | ··-·high_severity | 1436 | ··-·high_severity |
| 1433 | ··-·medium_complexity | 1437 | ··-·medium_complexity |
| 1434 | ··-·medium_disruption | 1438 | ··-·medium_disruption |
| 1435 | ··-·reboot_required | 1439 | ··-·reboot_required |
| 1436 | ··-·restrict_strategy | 1440 | ··-·restrict_strategy |
| 1437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1438 | [customizations] | ||
| 1439 | fips·=·true | ||
| 1440 | Group ·System·Cryptographic·Policies· Group·contains·6·rules | 1441 | Group ·System·Cryptographic·Policies· Group·contains·6·rules |
| 1441 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 1442 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 1442 | ····*·GnuTLS·library | 1443 | ····*·GnuTLS·library |
| 1443 | ····*·OpenSSL·library | 1444 | ····*·OpenSSL·library |
| 1444 | ····*·NSS·library | 1445 | ····*·NSS·library |
| 1445 | ····*·OpenJDK | 1446 | ····*·OpenJDK |
| 1446 | ····*·Libkrb5 | 1447 | ····*·Libkrb5 |
| Offset 2057, 33 lines modified | Offset 2057, 33 lines modified | ||
| 2057 | ··-·NIST-800-53-CM-7(b) | 2057 | ··-·NIST-800-53-CM-7(b) |
| 2058 | ··-·disable_strategy | 2058 | ··-·disable_strategy |
| 2059 | ··-·low_complexity | 2059 | ··-·low_complexity |
| 2060 | ··-·low_disruption | 2060 | ··-·low_disruption |
| 2061 | ··-·medium_severity | 2061 | ··-·medium_severity |
| 2062 | ··-·no_reboot_needed | 2062 | ··-·no_reboot_needed |
| 2063 | ··-·package_gdm_removed | 2063 | ··-·package_gdm_removed |
| Max diff block lines reached; 91870/98837 bytes (92.95%) of diff not shown. | |||
| Offset 14383, 16 lines modified | Offset 14383, 16 lines modified | ||
| 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038350:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038350:·2020·2020·2861·7320·6f66·2032·3032·362d······(as·of·2026- | ||
| 00038360:·3 | 00038360:·3031·2d32·3829·0a20·2020·2020·2020·2020··01-28).········· | ||
| 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17125, 341 lines modified | Offset 17125, 341 lines modified | ||
| 00042e40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00042e40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00042e50:·2223·6964·6d32·3339·3622·2074·6162·696e··"#idm2396"·tabin | 00042e50:·2223·6964·6d32·3339·3622·2074·6162·696e··"#idm2396"·tabin | ||
| 00042e60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00042e60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00042e70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00042e70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00042e80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00042e80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00042e90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00042e90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00042ea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00042ea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00042eb0:·3e52·656d·6564·6961·7469·6f6e·20 | 00042eb0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00042ec0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00042ed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00042ee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042ef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042f00:·6c61·7073·6522·2069·643d·2269·646d·3233··lapse"·id="idm23 | |||
| 00042f10:·3936·223e·3c70·7265·3e3c·636f·6465·3e0a··96"><pre><code>. | |||
| 00042f20:·5b63·7573·746f·6d69·7a61·7469·6f6e·735d··[customizations] | |||
| 00042f30:·0a66·6970·7320·3d20·7472·7565·0a3c·2f63··.fips·=·true.</c | |||
| 00042f40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00042f50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00042f60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00042f70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00042f80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00042f90:·6964·6d32·3339·3722·2074·6162·696e·6465··idm2397"·tabinde | |||
| 00042fa0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00042fb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00042fc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00042fd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00042fe0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00042ff0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0004 | 00043000:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0004 | 00043010:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0004 | 00043020:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0004 | 00043030:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0004 | 00043040:·3339·3722·3e3c·7072·653e·3c63·6f64·653e··397"><pre><code> | ||
| 0004 | 00043050:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0004 | 00043060:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 0004 | 00043070:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 0004 | 00043080:·666f·726d·730a·6966·2028·205b·2021·202d··forms.if·(·[·!·- | ||
| 0004 | 00043090:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | ||
| 000430a0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 000430b0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 000430c0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 000430d0:·3b20·2120·2820·5b20·2224·7b63·6f6e·7461··;·!·(·[·"${conta | |||
| 000430e0:·696e·6572·3a2d·7d22·203d·3d20·2262·7772··iner:-}"·==·"bwr | |||
| 000430f0:·6170·2d6f·7362·7569·6c64·2220·5d20·2920··ap-osbuild"·]·)· | |||
| 00043100:·2920·2661·6d70·3b26·616d·703b·207b·205b··)·&&·{·[ | |||
| 00043110:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 00042 | 00043120:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 0004 | 00043130:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 00042f80:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | |||
| 00042f90:·6d70·3b20·2120·2820·5b20·2224·7b63·6f6e··mp;·!·(·[·"${con | |||
| 00042fa0:·7461·696e·6572·3a2d·7d22·203d·3d20·2262··tainer:-}"·==·"b | |||
| 00042fb0:·7772·6170·2d6f·7362·7569·6c64·2220·5d20··wrap-osbuild"·]· | |||
| 00042fc0:·2920·2920·2661·6d70·3b26·616d·703b·207b··)·)·&&·{ | |||
| 00042fd0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 00042fe0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 00042ff0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 00043 | 00043140:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 00043 | 00043150:·6865·6e0a·0a76·6172·5f73·7973·7465·6d5f··hen..var_system_ | ||
| 00043 | 00043160:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | ||
| 00043 | 00043170:·6162·6272·2074·6974·6c65·3d22·6672·6f6d··abbr·title="from | ||
| 00043 | 00043180:·2050·726f·6669·6c65·2f72·6566·696e·652d···Profile/refine- | ||
| 00043 | 00043190:·7661·6c75·653a·2078·6363·6466·5f6f·7267··value:·xccdf_org | ||
| 00043 | 000431a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00043 | 000431b0:·656e·745f·7661·6c75·655f·7661·725f·7379··ent_value_var_sy | ||
| 00043 | 000431c0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00043 | 000431d0:·6379·223e·4649·5053·3a4f·5350·503c·2f61··cy">FIPS:OSPP</a | ||
| 00043 | 000431e0:·6262·723e·270a·0a0a·6669·7073·2d6d·6f64··bbr>'...fips-mod | ||
| 00043 | 000431f0:·652d·7365·7475·7020·2d2d·656e·6162·6c65··e-setup·--enable | ||
| 00043 | 00043200:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | ||
| 00043 | 00043210:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | ||
| 00043 | 00043220:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | ||
| 00043 | 00043230:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | ||
| 00043 | 00043240:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | ||
| 00043 | 00043250:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | ||
| 00043 | 00043260:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | ||
| 00043130:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 00043140:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 00043150:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 00043160:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 00043170:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 00043180:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 00043190:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 000431a0:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 000431b0:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 000431c0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 000431d0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 000431e0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 000431f0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 00043200:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 00043210:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 00043220:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 00043230:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 00043240:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 00043250:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 00043260:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 00043270:·6620·7465·7374·2022·2472·6322·20 | 00043270:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | ||
| 00043280:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | |||
| 00043290:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 000432a0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 000432b0:·6f20·224d·616b·6520·7375·7265·2074·6861··o·"Make·sure·tha | |||
| 000432c0:·7420·7468·6520·7363·7269·7074·2069·7320··t·the·script·is· | |||
| 000432d0:·696e·7374·616c·6c65·6420·6f6e·2074·6865··installed·on·the | |||
| 000432e0:·2072·656d·6564·6961·7465·6420·7379·7374···remediated·syst | |||
| 000432f0:·656d·2e22·2026·6774·3b26·616d·703b·320a··em."·>&2. | |||
| 00043300:·0965·6368·6f20·2253·6565·206f·7574·7075··.echo·"See·outpu | |||
| 00043310:·7420·6f66·2074·6865·2027·646e·6620·7072··t·of·the·'dnf·pr | |||
| 00043320:·6f76·6964·6573·2075·7064·6174·652d·6372··ovides·update-cr | |||
| 00043330:·7970·746f·2d70·6f6c·6963·6965·7327·2063··ypto-policies'·c | |||
| 00043340:·6f6d·6d61·6e64·2220·2667·743b·2661·6d70··ommand"·>& | |||
| 00043350:·3b32·0a09·6563·686f·2022·746f·2073·6565··;2..echo·"to·see | |||
| Max diff block lines reached; 285446/332420 bytes (85.87%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | ··············Virtualization·Host·(RHVH) | 59 | ··············Virtualization·Host·(RHVH) |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 566, 14 lines modified | Offset 566, 18 lines modified | ||
| 566 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 566 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 567 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 567 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 568 | ············_\x8i_\x8s_\x8m······1446 | 568 | ············_\x8i_\x8s_\x8m······1446 |
| 569 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 569 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 570 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 571 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 571 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 574 | [customizations] | ||
| 575 | fips·=·true | ||
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 574 | #·Remediation·is·applicable·only·in·certain·platforms | 577 | #·Remediation·is·applicable·only·in·certain·platforms |
| 575 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 578 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 576 | var_system_crypto_policy='FIPS:OSPP' | 579 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 696, 18 lines modified | Offset 700, 14 lines modified | ||
| 696 | ··-·NIST-800-53-SC-13 | 700 | ··-·NIST-800-53-SC-13 |
| 697 | ··-·enable_fips_mode | 701 | ··-·enable_fips_mode |
| 698 | ··-·high_severity | 702 | ··-·high_severity |
| 699 | ··-·medium_complexity | 703 | ··-·medium_complexity |
| 700 | ··-·medium_disruption | 704 | ··-·medium_disruption |
| 701 | ··-·reboot_required | 705 | ··-·reboot_required |
| 702 | ··-·restrict_strategy | 706 | ··-·restrict_strategy |
| 703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 704 | [customizations] | ||
| 705 | fips·=·true | ||
| 706 | Group ·System·Cryptographic·Policies· Group·contains·6·rules | 707 | Group ·System·Cryptographic·Policies· Group·contains·6·rules |
| 707 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 708 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 708 | ····*·GnuTLS·library | 709 | ····*·GnuTLS·library |
| 709 | ····*·OpenSSL·library | 710 | ····*·OpenSSL·library |
| 710 | ····*·NSS·library | 711 | ····*·NSS·library |
| 711 | ····*·OpenJDK | 712 | ····*·OpenJDK |
| 712 | ····*·Libkrb5 | 713 | ····*·Libkrb5 |
| Offset 8369, 14 lines modified | Offset 8369, 19 lines modified | ||
| 8369 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. | 8369 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. |
| 8370 | Severity: ··medium | 8370 | Severity: ··medium |
| 8371 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed | 8371 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed |
| 8372 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 | 8372 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 |
| 8373 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 8373 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 8374 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8374 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8375 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 | 8375 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 |
| 8376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8377 | [[packages]] | ||
| 8378 | name·=·"opensc" | ||
| 8379 | version·=·"*" | ||
| 8376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8381 | #·Remediation·is·applicable·only·in·certain·platforms | 8385 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8382 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 8386 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8402, 48 lines modified | Offset 8407, 48 lines modified | ||
| 8402 | ··-·NIST-800-53-CM-6(a) | 8407 | ··-·NIST-800-53-CM-6(a) |
| 8403 | ··-·enable_strategy | 8408 | ··-·enable_strategy |
| 8404 | ··-·low_complexity | 8409 | ··-·low_complexity |
| 8405 | ··-·low_disruption | 8410 | ··-·low_disruption |
| 8406 | ··-·medium_severity | 8411 | ··-·medium_severity |
| 8407 | ··-·no_reboot_needed | 8412 | ··-·no_reboot_needed |
| 8408 | ··-·package_opensc_installed | 8413 | ··-·package_opensc_installed |
| 8409 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8410 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8411 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8412 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8413 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8414 | package·--add=opensc | ||
| 8415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8416 | [[packages]] | ||
| 8417 | name·=·"opensc" | ||
| 8418 | version·=·"*" | ||
| 8419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8415 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8416 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8417 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8418 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8424 | include·install_opensc | 8419 | include·install_opensc |
| 8425 | class·install_opensc·{ | 8420 | class·install_opensc·{ |
| 8426 | ··package·{·'opensc': | 8421 | ··package·{·'opensc': |
| 8427 | ····ensure·=>·'installed', | 8422 | ····ensure·=>·'installed', |
| 8428 | ··} | 8423 | ··} |
| 8429 | } | 8424 | } |
| 8425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8430 | package·--add=opensc | ||
| 8430 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·p\x8pc\x8cs\x8sc\x8c-\x8-l\x8li\x8it\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 8431 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·p\x8pc\x8cs\x8sc\x8c-\x8-l\x8li\x8it\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 8431 | The·pcsc-lite·package·can·be·installed·with·the·following·command: | 8432 | The·pcsc-lite·package·can·be·installed·with·the·following·command: |
| 8432 | $·sudo·yum·install·pcsc-lite | 8433 | $·sudo·yum·install·pcsc-lite |
| 8433 | Rationale:··The·pcsc-lite·package·must·be·installed·if·it·is·to·be·available·for·multifactor·authentication·using·smartcards. | 8434 | Rationale:··The·pcsc-lite·package·must·be·installed·if·it·is·to·be·available·for·multifactor·authentication·using·smartcards. |
| 8434 | Severity: ··medium | 8435 | Severity: ··medium |
| 8435 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pcsc-lite_installed | 8436 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pcsc-lite_installed |
| 8436 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 8437 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 8437 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 8438 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 8438 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8439 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 8440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 8441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8442 | [[packages]] | ||
| 8443 | name·=·"pcsc-lite" | ||
| 8444 | version·=·"*" | ||
| Max diff block lines reached; 32635/39280 bytes (83.08%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 129 lines modified | Offset 15134, 129 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b250:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b270:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b280:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b290:·3d22·6964·6d35·3338·3922·3e3c·7072·653e··="idm5389"><pre> | |||
| 0003b2a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2b0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2c0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b240:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b250:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b260:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b270:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b280:·2069·643d·2269·646d·3533·3839·223e·3c74···id="idm5389"><t | |||
| 0003b290:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b2a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b2b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b2c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b2d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b300:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b310:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b320:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b330:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b340:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b350:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b360:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b370:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b380:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b390:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b3a0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b3b0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003b3c0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b3d0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b3e0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b3f0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003b400:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 0003b410:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 0003b420:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b430:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b440:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b450:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b460:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b470:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b480:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b490:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b4a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b4b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b4c0:·3533·3930·2220·7461·6269·6e64·6578·3d22··5390"·tabindex=" | |||
| 0003b4d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b4e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b4f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b500:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b510:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b520:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b530:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b540:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b550:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b560:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b570:·3339·3022·3e3c·7461·626c·6520·636c·6173··390"><table·clas | |||
| 0003b580:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b590:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b5a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b5b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b5c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b5d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b5e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b5f0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b600:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b610:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b620:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b630:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b640:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b660:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b670:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b680:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b690:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b6a0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b6b0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b6c0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b6d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b6e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b6f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b700:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b710:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b720:·0a20·202d·2043·4345·2d38·3330·3637·2d39··.··-·CCE-83067-9 | |||
| 0003b730:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b740:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b750:·2d53·4c45·532d·3132·2d30·3130·3439·390a··-SLES-12-010499. | |||
| 0003b760:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b770:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b780:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b790:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b7a0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b7b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b7c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b7d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b7e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b7f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b800:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b810:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| Max diff block lines reached; 514394/531974 bytes (96.70%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 553, 14 lines modified | Offset 553, 19 lines modified | ||
| 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 565 | #·Remediation·is·applicable·only·in·certain·platforms | 569 | #·Remediation·is·applicable·only·in·certain·platforms |
| 566 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 586, 19 lines modified | Offset 591, 14 lines modified | ||
| 586 | ··-·PCI-DSSv4-2.2.6 | 591 | ··-·PCI-DSSv4-2.2.6 |
| 587 | ··-·enable_strategy | 592 | ··-·enable_strategy |
| 588 | ··-·low_complexity | 593 | ··-·low_complexity |
| 589 | ··-·low_disruption | 594 | ··-·low_disruption |
| 590 | ··-·medium_severity | 595 | ··-·medium_severity |
| 591 | ··-·no_reboot_needed | 596 | ··-·no_reboot_needed |
| 592 | ··-·package_sudo_installed | 597 | ··-·package_sudo_installed |
| 593 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 594 | [[packages]] | ||
| 595 | name·=·"sudo" | ||
| 596 | version·=·"*" | ||
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 602 | include·install_sudo | 603 | include·install_sudo |
| Offset 1392, 14 lines modified | Offset 1392, 19 lines modified | ||
| 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1393 | ·············automatic,·regular·execution. | 1393 | ·············automatic,·regular·execution. |
| 1394 | Severity: ···medium | 1394 | Severity: ···medium |
| 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1396 | Identifiers:·CCE-91476-2 | 1396 | Identifiers:·CCE-91476-2 |
| 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1400 | [[packages]] | ||
| 1401 | name·=·"dnf-automatic" | ||
| 1402 | version·=·"*" | ||
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1404 | zypper·install·-y·"dnf-automatic" | 1408 | zypper·install·-y·"dnf-automatic" |
| Offset 1416, 19 lines modified | Offset 1421, 14 lines modified | ||
| 1416 | ··-·CCE-91476-2 | 1421 | ··-·CCE-91476-2 |
| 1417 | ··-·enable_strategy | 1422 | ··-·enable_strategy |
| 1418 | ··-·low_complexity | 1423 | ··-·low_complexity |
| 1419 | ··-·low_disruption | 1424 | ··-·low_disruption |
| 1420 | ··-·medium_severity | 1425 | ··-·medium_severity |
| 1421 | ··-·no_reboot_needed | 1426 | ··-·no_reboot_needed |
| 1422 | ··-·package_dnf-automatic_installed | 1427 | ··-·package_dnf-automatic_installed |
| 1423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1424 | [[packages]] | ||
| 1425 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 26952/32239 bytes (83.60%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 129 lines modified | Offset 15139, 129 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·2053· | 0003b290:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b2a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2e0:·2069·643d·2269·646d·3533·3839·223e·3c70···id="idm5389"><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b300:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b310:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b2a0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b2b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b2c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b2d0:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b2e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b300:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b310:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b320:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b330:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b340:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b350:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b360:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b370:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b380:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b390:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b3a0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b3b0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b3c0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b3d0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b3e0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b3f0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b400:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b410:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b420:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b430:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b440:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b450:·6865·6e0a·0a7a·7970·7065·7220·696e·7374··hen..zypper·inst | |||
| 0003b460:·616c·6c20·2d79·2022·6169·6465·220a·0a65··all·-y·"aide"..e | |||
| 0003b470:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b480:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b490:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b4a0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b4b0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003b4c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b4e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b4f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b500:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b510:·6964·6d35·3339·3022·2074·6162·696e·6465··idm5390"·tabinde | |||
| 0003b520:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b530:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b540:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b550:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b560:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b570:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b580:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b590:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5c0:·646d·3533·3930·223e·3c74·6162·6c65·2063··dm5390"><table·c | |||
| 0003b5d0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5e0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b5f0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b600:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b610:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b640:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b650:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b660:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b670:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b680:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b690:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b6a0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b6b0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b6c0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b6d0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b6e0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b6f0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b700:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b710:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b720:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b730:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b740:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b750:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b760:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b770:·6773·3a0a·2020·2d20·4343·452d·3833·3036··gs:.··-·CCE-8306 | |||
| 0003b780:·372d·390a·2020·2d20·434a·4953·2d35·2e31··7-9.··-·CJIS-5.1 | |||
| 0003b790:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b7a0:·5449·472d·534c·4553·2d31·322d·3031·3034··TIG-SLES-12-0104 | |||
| 0003b7b0:·3939·0a20·202d·204e·4953·542d·3830·302d··99.··-·NIST-800- | |||
| 0003b7c0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b7d0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b7e0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b7f0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b800:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b810:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b820:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b830:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b840:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b850:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b860:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b | 0003b320:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b330:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| Max diff block lines reached; 514946/532526 bytes (96.70%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 126 | ·············_\x8c_\x8i_\x8s············1.4.1 | 126 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 159, 19 lines modified | Offset 164, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 166 | ··-·low_complexity |
| 162 | ··-·low_disruption | 167 | ··-·low_disruption |
| 163 | ··-·medium_severity | 168 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | 176 | include·install_aide |
| Offset 1293, 14 lines modified | Offset 1293, 19 lines modified | ||
| 1293 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1293 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1294 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1294 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1295 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1295 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1296 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1296 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1297 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1297 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1298 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1298 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1301 | [[packages]] | ||
| 1302 | name·=·"sudo" | ||
| 1303 | version·=·"*" | ||
| 1300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1305 | #·Remediation·is·applicable·only·in·certain·platforms | 1309 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1306 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1310 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1326, 19 lines modified | Offset 1331, 14 lines modified | ||
| 1326 | ··-·PCI-DSSv4-2.2.6 | 1331 | ··-·PCI-DSSv4-2.2.6 |
| 1327 | ··-·enable_strategy | 1332 | ··-·enable_strategy |
| 1328 | ··-·low_complexity | 1333 | ··-·low_complexity |
| 1329 | ··-·low_disruption | 1334 | ··-·low_disruption |
| 1330 | ··-·medium_severity | 1335 | ··-·medium_severity |
| 1331 | ··-·no_reboot_needed | 1336 | ··-·no_reboot_needed |
| 1332 | ··-·package_sudo_installed | 1337 | ··-·package_sudo_installed |
| 1333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1334 | [[packages]] | ||
| 1335 | name·=·"sudo" | ||
| 1336 | version·=·"*" | ||
| 1337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1342 | include·install_sudo | 1343 | include·install_sudo |
| Offset 2132, 14 lines modified | Offset 2132, 19 lines modified | ||
| 2132 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 2132 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 2133 | ·············automatic,·regular·execution. | 2133 | ·············automatic,·regular·execution. |
| 2134 | Severity: ···medium | 2134 | Severity: ···medium |
| 2135 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 2135 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 2136 | Identifiers:·CCE-91476-2 | 2136 | Identifiers:·CCE-91476-2 |
| 2137 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 2137 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 2138 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 2138 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 2139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2140 | [[packages]] | ||
| 2141 | name·=·"dnf-automatic" | ||
| 2142 | version·=·"*" | ||
| 2139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2144 | zypper·install·-y·"dnf-automatic" | 2148 | zypper·install·-y·"dnf-automatic" |
| Offset 2156, 19 lines modified | Offset 2161, 14 lines modified | ||
| 2156 | ··-·CCE-91476-2 | 2161 | ··-·CCE-91476-2 |
| 2157 | ··-·enable_strategy | 2162 | ··-·enable_strategy |
| 2158 | ··-·low_complexity | 2163 | ··-·low_complexity |
| 2159 | ··-·low_disruption | 2164 | ··-·low_disruption |
| 2160 | ··-·medium_severity | 2165 | ··-·medium_severity |
| 2161 | ··-·no_reboot_needed | 2166 | ··-·no_reboot_needed |
| 2162 | ··-·package_dnf-automatic_installed | 2167 | ··-·package_dnf-automatic_installed |
| 2163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2164 | [[packages]] | ||
| 2165 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 27159/32454 bytes (83.68%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 129 lines modified | Offset 15125, 129 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | ||
| 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b1c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b1d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b200:·643d·2269·646d·3533·3839·223e·3c70·7265··d="idm5389"><pre | |||
| 0003b210:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b220:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b230:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b1b0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b1c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1f0:·2220·6964·3d22·6964·6d35·3338·3922·3e3c··"·id="idm5389">< | |||
| 0003b200:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b210:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b220:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b230:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b240:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b250:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b260:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b270:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b280:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b290:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b2b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b2d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b2e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b2f0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003b300:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b310:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b320:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b330:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003b340:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003b350:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003b360:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003b370:·6e0a·0a7a·7970·7065·7220·696e·7374·616c··n..zypper·instal | |||
| 0003b380:·6c20·2d79·2022·6169·6465·220a·0a65·6c73··l·-y·"aide"..els | |||
| 0003b390:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b3a0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b3b0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b3c0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b3d0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b3e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b3f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b400:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b410:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b420:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b430:·6d35·3339·3022·2074·6162·696e·6465·783d··m5390"·tabindex= | |||
| 0003b440:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b450:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b460:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b470:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b480:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b490:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b4a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4e0:·3533·3930·223e·3c74·6162·6c65·2063·6c61··5390"><table·cla | |||
| 0003b4f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b500:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b510:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b520:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b530:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b540:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b550:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b560:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b570:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b580:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b590:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b5a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b5d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b5e0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b5f0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b600:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b610:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b620:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b630:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b640:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b650:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b660:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b670:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b680:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b690:·3a0a·2020·2d20·4343·452d·3833·3036·372d··:.··-·CCE-83067- | |||
| 0003b6a0:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b6b0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b6c0:·472d·534c·4553·2d31·322d·3031·3034·3939··G-SLES-12-010499 | |||
| 0003b6d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b6e0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b6f0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b700:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b710:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b720:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b730:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b740:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b750:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b760:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b770:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b780:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b | 0003b240:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| Max diff block lines reached; 369158/386738 bytes (95.45%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 533, 14 lines modified | Offset 533, 19 lines modified | ||
| 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 541 | [[packages]] | ||
| 542 | name·=·"sudo" | ||
| 543 | version·=·"*" | ||
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 545 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 546 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 547 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 548 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 545 | #·Remediation·is·applicable·only·in·certain·platforms | 549 | #·Remediation·is·applicable·only·in·certain·platforms |
| 546 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 550 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 566, 19 lines modified | Offset 571, 14 lines modified | ||
| 566 | ··-·PCI-DSSv4-2.2.6 | 571 | ··-·PCI-DSSv4-2.2.6 |
| 567 | ··-·enable_strategy | 572 | ··-·enable_strategy |
| 568 | ··-·low_complexity | 573 | ··-·low_complexity |
| 569 | ··-·low_disruption | 574 | ··-·low_disruption |
| 570 | ··-·medium_severity | 575 | ··-·medium_severity |
| 571 | ··-·no_reboot_needed | 576 | ··-·no_reboot_needed |
| 572 | ··-·package_sudo_installed | 577 | ··-·package_sudo_installed |
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 574 | [[packages]] | ||
| 575 | name·=·"sudo" | ||
| 576 | version·=·"*" | ||
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 579 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 580 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 581 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 582 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 582 | include·install_sudo | 583 | include·install_sudo |
| Offset 1302, 14 lines modified | Offset 1302, 19 lines modified | ||
| 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1303 | ·············automatic,·regular·execution. | 1303 | ·············automatic,·regular·execution. |
| 1304 | Severity: ···medium | 1304 | Severity: ···medium |
| 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1306 | Identifiers:·CCE-91476-2 | 1306 | Identifiers:·CCE-91476-2 |
| 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1310 | [[packages]] | ||
| 1311 | name·=·"dnf-automatic" | ||
| 1312 | version·=·"*" | ||
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1314 | zypper·install·-y·"dnf-automatic" | 1318 | zypper·install·-y·"dnf-automatic" |
| Offset 1326, 19 lines modified | Offset 1331, 14 lines modified | ||
| 1326 | ··-·CCE-91476-2 | 1331 | ··-·CCE-91476-2 |
| 1327 | ··-·enable_strategy | 1332 | ··-·enable_strategy |
| 1328 | ··-·low_complexity | 1333 | ··-·low_complexity |
| 1329 | ··-·low_disruption | 1334 | ··-·low_disruption |
| 1330 | ··-·medium_severity | 1335 | ··-·medium_severity |
| 1331 | ··-·no_reboot_needed | 1336 | ··-·no_reboot_needed |
| 1332 | ··-·package_dnf-automatic_installed | 1337 | ··-·package_dnf-automatic_installed |
| 1333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1334 | [[packages]] | ||
| 1335 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 15722/21128 bytes (74.41%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 106 lines modified | Offset 14793, 106 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | ||
| 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00039d00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00039d10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00039d20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00039d30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00039d40:·643d·2269·646d·3831·3330·223e·3c70·7265··d="idm8130"><pre | |||
| 00039d50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00039d60:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | |||
| 00039d70:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | |||
| 00039d80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00039cf0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00039d00:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d10:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039d20:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039d30:·2220·6964·3d22·6964·6d38·3133·3022·3e3c··"·id="idm8130">< | |||
| 00039d40:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00039d50:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00039d60:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00039d70:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00039d80:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00039d90:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00039da0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039db0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00039dc0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039dd0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00039de0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00039df0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039e00:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00039e10:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00039e20:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00039e30:·3e3c·636f·6465·3e0a·7a79·7070·6572·2069··><code>.zypper·i | |||
| 00039e40:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 00039e50:·7574·6f6d·6174·6963·220a·3c2f·636f·6465··utomatic".</code | |||
| 00039 | 00039d90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 00039 | 00039da0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 00039 | 00039db0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 00039 | 00039dc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 00039 | 00039dd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039 | 00039de0:·3831·3331·2220·7461·6269·6e64·6578·3d22··8131"·tabindex=" | ||
| 00039 | 00039df0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039e | 00039e00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039e | 00039e10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039e | 00039e20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039 | 00039e30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039e40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 00039e50:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00039e60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039e70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039e80:·7073·6522·2069·643d·2269·646d·3831·3331··pse"·id="idm8131 | |||
| 00039e90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039ea0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039f10:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00039f20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039f30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039f40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039f50:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00039f60:·3133·3122·3e3c·7461·626c·6520·636c·6173··131"><table·clas | |||
| 00039f70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039f80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039 | 00039eb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 00039fa0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039fb0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039fc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039 | 00039ec0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 00039ed0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039ee0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039ef0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039f00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039f10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039f20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039f | 00039f30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 00039f | 00039f40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003a000:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a010:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a020:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003 | 00039f50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 00039f60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039f70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039f80:·7072·653e·3c63·6f64·653e·0a7a·7970·7065··pre><code>.zyppe | |||
| 00039f90:·7220·696e·7374·616c·6c20·2d79·2022·646e··r·install·-y·"dn | |||
| 00039fa0:·662d·6175·746f·6d61·7469·6322·0a3c·2f63··f-automatic".</c | |||
| 00039fb0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039fc0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039fd0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039fe0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039ff0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a000:·6964·6d38·3133·3222·2074·6162·696e·6465··idm8132"·tabinde | |||
| 0003a010:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003a020:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003a030:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003a040:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003a050:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003a060:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003a070:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003a080:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a090:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a0a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a0b0:·646d·3831·3332·223e·3c74·6162·6c65·2063··dm8132"><table·c | |||
| 0003a0c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003a0d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003a0e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003a0f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003a100:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003a110:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| Max diff block lines reached; 414/14820 bytes (2.79%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 14 lines modified | Offset 87, 19 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | [[packages]] | ||
| 96 | name·=·"dnf-automatic" | ||
| 97 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | zypper·install·-y·"dnf-automatic" | 103 | zypper·install·-y·"dnf-automatic" |
| Offset 111, 19 lines modified | Offset 116, 14 lines modified | ||
| 111 | ··-·CCE-91476-2 | 116 | ··-·CCE-91476-2 |
| 112 | ··-·enable_strategy | 117 | ··-·enable_strategy |
| 113 | ··-·low_complexity | 118 | ··-·low_complexity |
| 114 | ··-·low_disruption | 119 | ··-·low_disruption |
| 115 | ··-·medium_severity | 120 | ··-·medium_severity |
| 116 | ··-·no_reboot_needed | 121 | ··-·no_reboot_needed |
| 117 | ··-·package_dnf-automatic_installed | 122 | ··-·package_dnf-automatic_installed |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | include·install_dnf-automatic | 128 | include·install_dnf-automatic |
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 129 lines modified | Offset 15171, 129 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b4a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4e0:·6964·3d22·6964·6d35·3338·3922·3e3c·7072··id="idm5389"><pr | |||
| 0003b4f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b500:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b510:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b490:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b4a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b4b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4d0:·6522·2069·643d·2269·646d·3533·3839·223e··e"·id="idm5389"> | |||
| 0003b4e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b500:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b510:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b520:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b530:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b540:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b550:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b560:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b570:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b580:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b590:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b5a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b5b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5d0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b5e0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b5f0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b600:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b610:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b620:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b630:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b640:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b650:·656e·0a0a·7a79·7070·6572·2069·6e73·7461··en..zypper·insta | |||
| 0003b660:·6c6c·202d·7920·2261·6964·6522·0a0a·656c··ll·-y·"aide"..el | |||
| 0003b670:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b680:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b690:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b6a0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b6b0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b6c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b6d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b6e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b6f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b700:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b710:·646d·3533·3930·2220·7461·6269·6e64·6578··dm5390"·tabindex | |||
| 0003b720:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b730:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b740:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b750:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b760:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b770:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b780:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b790:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b7a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b7b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b7c0:·6d35·3339·3022·3e3c·7461·626c·6520·636c··m5390"><table·cl | |||
| 0003b7d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b7e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b7f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b800:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b810:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b820:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b830:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b840:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b850:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b860:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b870:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b880:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b890:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b8a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b8b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b8c0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b8d0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b8e0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b8f0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b900:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b910:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b920:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b930:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b940:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b950:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b960:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b970:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b980:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b990:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b9a0:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b9b0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b9c0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b9d0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b9e0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9f0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003ba00:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003ba10:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003ba20:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003ba30:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003ba40:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003ba50:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003ba60:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b520:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| Max diff block lines reached; 991161/1008741 bytes (98.26%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 128, 14 lines modified | Offset 128, 19 lines modified | ||
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 131 | ·············_\x8c_\x8i_\x8s············1.4.1 | 131 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 144 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 19 lines modified | Offset 169, 14 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 169 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 170 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 171 | ··-·low_complexity |
| 167 | ··-·low_disruption | 172 | ··-·low_disruption |
| 168 | ··-·medium_severity | 173 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 174 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 175 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | include·install_aide | 181 | include·install_aide |
| Offset 1156, 14 lines modified | Offset 1156, 19 lines modified | ||
| 1156 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1156 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1157 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1157 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1158 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1158 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1159 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1159 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1160 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1160 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1161 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1161 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1162 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1162 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1164 | [[packages]] | ||
| 1165 | name·=·"sudo" | ||
| 1166 | version·=·"*" | ||
| 1163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1168 | #·Remediation·is·applicable·only·in·certain·platforms | 1172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1189, 19 lines modified | Offset 1194, 14 lines modified | ||
| 1189 | ··-·PCI-DSSv4-2.2.6 | 1194 | ··-·PCI-DSSv4-2.2.6 |
| 1190 | ··-·enable_strategy | 1195 | ··-·enable_strategy |
| 1191 | ··-·low_complexity | 1196 | ··-·low_complexity |
| 1192 | ··-·low_disruption | 1197 | ··-·low_disruption |
| 1193 | ··-·medium_severity | 1198 | ··-·medium_severity |
| 1194 | ··-·no_reboot_needed | 1199 | ··-·no_reboot_needed |
| 1195 | ··-·package_sudo_installed | 1200 | ··-·package_sudo_installed |
| 1196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1197 | [[packages]] | ||
| 1198 | name·=·"sudo" | ||
| 1199 | version·=·"*" | ||
| 1200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1205 | include·install_sudo | 1206 | include·install_sudo |
| Offset 9504, 14 lines modified | Offset 9504, 19 lines modified | ||
| 9504 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9504 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9505 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9505 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9506 | ·····················00232 | 9506 | ·····················00232 |
| 9507 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9507 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9508 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9508 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9509 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9509 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9510 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9510 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9512 | [[packages]] | ||
| 9513 | name·=·"pam_apparmor" | ||
| 9514 | version·=·"*" | ||
| 9511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9516 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9517 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9518 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9519 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9516 | #·Remediation·is·applicable·only·in·certain·platforms | 9520 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9517 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9521 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9543, 19 lines modified | Offset 9548, 14 lines modified | ||
| 9543 | ··-·NIST-800-53-SC-7(21) | 9548 | ··-·NIST-800-53-SC-7(21) |
| 9544 | ··-·enable_strategy | 9549 | ··-·enable_strategy |
| 9545 | ··-·low_complexity | 9550 | ··-·low_complexity |
| 9546 | ··-·low_disruption | 9551 | ··-·low_disruption |
| 9547 | ··-·medium_severity | 9552 | ··-·medium_severity |
| 9548 | ··-·no_reboot_needed | 9553 | ··-·no_reboot_needed |
| 9549 | ··-·package_pam_apparmor_installed | 9554 | ··-·package_pam_apparmor_installed |
| 9550 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9551 | [[packages]] | ||
| 9552 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 50097/55560 bytes (90.17%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037ef0:·323 | 00037ef0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 129 lines modified | Offset 15149, 129 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·20 | 0003b330:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b340:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3533·3839·223e··e"·id="idm5389"> | |||
| 0003b340:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b350:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b360:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b370:·6170·7365·2220·6964·3d22·6964·6d35·3338··apse"·id="idm538 | |||
| 0003b380:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b390:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b3a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b3b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b3c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b3d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b3e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b3f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b400:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b410:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b420:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b430:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b440:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b450:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b460:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003b390:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003b3a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b3b0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b480:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b490:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b4a0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b4b0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003b4c0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003b4d0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003b4e0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003b4f0:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b500:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b510:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b520:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b530:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b540:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b550:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b560:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b570:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b580:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b590:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b5a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b5b0:·2223·6964·6d35·3339·3022·2074·6162·696e··"#idm5390"·tabin | |||
| 0003b5c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b5d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b5e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b5f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b600:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b610:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b620:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b630:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b640:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b650:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b660:·2269·646d·3533·3930·223e·3c74·6162·6c65··"idm5390"><table | |||
| 0003b670:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b680:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b690:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b6b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b6c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b6e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b6f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b700:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b710:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b720:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b730:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b740:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b750:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b760:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b770:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b780:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b790:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b7a0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b7b0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b7c0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b7d0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b7e0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b7f0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b800:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b810:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | |||
| 0003b820:·3036·372d·390a·2020·2d20·434a·4953·2d35··067-9.··-·CJIS-5 | |||
| 0003b830:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b840:·2d53·5449·472d·534c·4553·2d31·322d·3031··-STIG-SLES-12-01 | |||
| 0003b850:·3034·3939·0a20·202d·204e·4953·542d·3830··0499.··-·NIST-80 | |||
| 0003b860:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b870:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b880:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b890:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b8a0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b8b0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b8c0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b8d0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b8e0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b8f0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b900:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b | 0003b3c0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | ||
| 0003b | 0003b3d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| Max diff block lines reached; 775218/792936 bytes (97.77%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 19 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 161, 19 lines modified | Offset 166, 14 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 168 | ··-·low_complexity |
| 164 | ··-·low_disruption | 169 | ··-·low_disruption |
| 165 | ··-·medium_severity | 170 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_aide | 178 | include·install_aide |
| Offset 1046, 14 lines modified | Offset 1046, 19 lines modified | ||
| 1046 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1046 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1047 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1047 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1048 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1048 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1049 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1049 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1050 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1050 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1051 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1051 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1052 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1052 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1053 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1054 | [[packages]] | ||
| 1055 | name·=·"sudo" | ||
| 1056 | version·=·"*" | ||
| 1053 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1057 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1054 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1058 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1055 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1059 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1056 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1060 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1057 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1061 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1058 | #·Remediation·is·applicable·only·in·certain·platforms | 1062 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1059 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1063 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1079, 19 lines modified | Offset 1084, 14 lines modified | ||
| 1079 | ··-·PCI-DSSv4-2.2.6 | 1084 | ··-·PCI-DSSv4-2.2.6 |
| 1080 | ··-·enable_strategy | 1085 | ··-·enable_strategy |
| 1081 | ··-·low_complexity | 1086 | ··-·low_complexity |
| 1082 | ··-·low_disruption | 1087 | ··-·low_disruption |
| 1083 | ··-·medium_severity | 1088 | ··-·medium_severity |
| 1084 | ··-·no_reboot_needed | 1089 | ··-·no_reboot_needed |
| 1085 | ··-·package_sudo_installed | 1090 | ··-·package_sudo_installed |
| 1086 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1087 | [[packages]] | ||
| 1088 | name·=·"sudo" | ||
| 1089 | version·=·"*" | ||
| 1090 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1091 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1092 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1092 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1093 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1093 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1094 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1094 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1095 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1095 | include·install_sudo | 1096 | include·install_sudo |
| Offset 9394, 14 lines modified | Offset 9394, 19 lines modified | ||
| 9394 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9394 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9395 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9395 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9396 | ·····················00232 | 9396 | ·····················00232 |
| 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9398 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9398 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9399 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9399 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9402 | [[packages]] | ||
| 9403 | name·=·"pam_apparmor" | ||
| 9404 | version·=·"*" | ||
| 9401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9402 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9403 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9404 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9408 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9405 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9409 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9406 | #·Remediation·is·applicable·only·in·certain·platforms | 9410 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9407 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9411 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9433, 19 lines modified | Offset 9438, 14 lines modified | ||
| 9433 | ··-·NIST-800-53-SC-7(21) | 9438 | ··-·NIST-800-53-SC-7(21) |
| 9434 | ··-·enable_strategy | 9439 | ··-·enable_strategy |
| 9435 | ··-·low_complexity | 9440 | ··-·low_complexity |
| 9436 | ··-·low_disruption | 9441 | ··-·low_disruption |
| 9437 | ··-·medium_severity | 9442 | ··-·medium_severity |
| 9438 | ··-·no_reboot_needed | 9443 | ··-·no_reboot_needed |
| 9439 | ··-·package_pam_apparmor_installed | 9444 | ··-·package_pam_apparmor_installed |
| 9440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9441 | [[packages]] | ||
| 9442 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 39259/44732 bytes (87.76%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037f00:·2d3 | 00037f00:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 129 lines modified | Offset 15135, 129 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2a0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b260:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b270:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b280:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b290:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b2a0:·3338·3922·3e3c·7461·626c·6520·636c·6173··389"><table·clas | |||
| 0003b2b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b300:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b310:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b320:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b330:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b340:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b350:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b360:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b370:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b380:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b3a0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b3b0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b3c0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b3d0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b3e0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b3f0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b400:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b410:·5d3b·2074·6865·6e0a·0a7a·7970·7065·7220··];·then..zypper· | |||
| 0003b420:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b430:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003b440:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b450:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b460:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b470:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b480:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b490:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b4a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b4b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b4c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b4d0:·743d·2223·6964·6d35·3339·3022·2074·6162··t="#idm5390"·tab | |||
| 0003b4e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b4f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b500:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b510:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b520:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b530:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b540:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b550:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b560:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b570:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b580:·643d·2269·646d·3533·3930·223e·3c74·6162··d="idm5390"><tab | |||
| 0003b590:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b5a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b5b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b5c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b5d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b5e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b5f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b600:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b610:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b620:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b630:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b640:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b650:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b660:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b670:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b680:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b690:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b6a0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b6b0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b6c0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b6d0:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b6e0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b6f0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b700:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b710:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b720:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b730:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b740:·3833·3036·372d·390a·2020·2d20·434a·4953··83067-9.··-·CJIS | |||
| 0003b750:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b760:·5341·2d53·5449·472d·534c·4553·2d31·322d··SA-STIG-SLES-12- | |||
| 0003b770:·3031·3034·3939·0a20·202d·204e·4953·542d··010499.··-·NIST- | |||
| 0003b780:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b790:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b7a0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b7b0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b7c0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b7d0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b7e0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b7f0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b800:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b810:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b820:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b830:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| Max diff block lines reached; 647480/665198 bytes (97.34%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 1043, 14 lines modified | Offset 1043, 19 lines modified | ||
| 1043 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1043 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1044 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1044 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1045 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1045 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1046 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1046 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1047 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1047 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1048 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1048 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1049 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1049 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1051 | [[packages]] | ||
| 1052 | name·=·"sudo" | ||
| 1053 | version·=·"*" | ||
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1054 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1055 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1056 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1057 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1058 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1055 | #·Remediation·is·applicable·only·in·certain·platforms | 1059 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1056 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1060 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1076, 19 lines modified | Offset 1081, 14 lines modified | ||
| 1076 | ··-·PCI-DSSv4-2.2.6 | 1081 | ··-·PCI-DSSv4-2.2.6 |
| 1077 | ··-·enable_strategy | 1082 | ··-·enable_strategy |
| 1078 | ··-·low_complexity | 1083 | ··-·low_complexity |
| 1079 | ··-·low_disruption | 1084 | ··-·low_disruption |
| 1080 | ··-·medium_severity | 1085 | ··-·medium_severity |
| 1081 | ··-·no_reboot_needed | 1086 | ··-·no_reboot_needed |
| 1082 | ··-·package_sudo_installed | 1087 | ··-·package_sudo_installed |
| 1083 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1084 | [[packages]] | ||
| 1085 | name·=·"sudo" | ||
| 1086 | version·=·"*" | ||
| 1087 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1088 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1088 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1089 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1089 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1090 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1090 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1091 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1091 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1092 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1092 | include·install_sudo | 1093 | include·install_sudo |
| Offset 9391, 14 lines modified | Offset 9391, 19 lines modified | ||
| 9391 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9391 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9392 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9392 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9393 | ·····················00232 | 9393 | ·····················00232 |
| 9394 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9394 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9395 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9395 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9396 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9396 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9399 | [[packages]] | ||
| 9400 | name·=·"pam_apparmor" | ||
| 9401 | version·=·"*" | ||
| 9398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9399 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9403 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9400 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9404 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9401 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9405 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9402 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9406 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9403 | #·Remediation·is·applicable·only·in·certain·platforms | 9407 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9404 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9408 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9430, 19 lines modified | Offset 9435, 14 lines modified | ||
| 9430 | ··-·NIST-800-53-SC-7(21) | 9435 | ··-·NIST-800-53-SC-7(21) |
| 9431 | ··-·enable_strategy | 9436 | ··-·enable_strategy |
| 9432 | ··-·low_complexity | 9437 | ··-·low_complexity |
| 9433 | ··-·low_disruption | 9438 | ··-·low_disruption |
| 9434 | ··-·medium_severity | 9439 | ··-·medium_severity |
| 9435 | ··-·no_reboot_needed | 9440 | ··-·no_reboot_needed |
| 9436 | ··-·package_pam_apparmor_installed | 9441 | ··-·package_pam_apparmor_installed |
| 9437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9438 | [[packages]] | ||
| 9439 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 34109/39592 bytes (86.15%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 129 lines modified | Offset 15162, 129 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·53 | 0003b400:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b410:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b420:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b430:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b440:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b450:·2220·6964·3d22·6964·6d35·3338·3922·3e3c··"·id="idm5389">< | |||
| 0003b460:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b470:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b480:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b450:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b460:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b470:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b480:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b490:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b4a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b4b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b4d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b4f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b500:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b510:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b520:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b530:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b540:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b550:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b560:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b570:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b580:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b590:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b5a0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b5b0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b5c0:·7468·656e·0a0a·7a79·7070·6572·2069·6e73··then..zypper·ins | |||
| 0003b5d0:·7461·6c6c·202d·7920·2261·6964·6522·0a0a··tall·-y·"aide".. | |||
| 0003b5e0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b5f0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b600:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b610:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b620:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b630:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b640:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b650:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b660:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b670:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b680:·2369·646d·3533·3930·2220·7461·6269·6e64··#idm5390"·tabind | |||
| 0003b690:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b6a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b6b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b6c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b6d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b6e0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b6f0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b700:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b710:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b720:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b730:·6964·6d35·3339·3022·3e3c·7461·626c·6520··idm5390"><table· | |||
| 0003b740:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b750:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b760:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b770:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b780:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b790:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b7a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b7b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b7c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b7d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b7e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b7f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b800:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b810:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b820:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b830:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b840:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b850:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b860:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b870:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b880:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b890:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b8a0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b8b0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b8c0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b8d0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b8e0:·6167·733a·0a20·202d·2043·4345·2d38·3330··ags:.··-·CCE-830 | |||
| 0003b8f0:·3637·2d39·0a20·202d·2043·4a49·532d·352e··67-9.··-·CJIS-5. | |||
| 0003b900:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b910:·5354·4947·2d53·4c45·532d·3132·2d30·3130··STIG-SLES-12-010 | |||
| 0003b920:·3439·390a·2020·2d20·4e49·5354·2d38·3030··499.··-·NIST-800 | |||
| 0003b930:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b940:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b950:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b960:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b970:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b980:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b990:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b9a0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b9b0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b9c0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b9d0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b490:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| Max diff block lines reached; 953526/971106 bytes (98.19%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 19 lines modified | ||
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | 142 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 19 lines modified | Offset 167, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 169 | ··-·low_complexity |
| 165 | ··-·low_disruption | 170 | ··-·low_disruption |
| 166 | ··-·medium_severity | 171 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | include·install_aide | 179 | include·install_aide |
| Offset 1154, 14 lines modified | Offset 1154, 19 lines modified | ||
| 1154 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1154 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1155 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1155 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1156 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1156 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1157 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1157 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1158 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1158 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1159 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1159 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1160 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1160 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1162 | [[packages]] | ||
| 1163 | name·=·"sudo" | ||
| 1164 | version·=·"*" | ||
| 1161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1166 | #·Remediation·is·applicable·only·in·certain·platforms | 1170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1187, 19 lines modified | Offset 1192, 14 lines modified | ||
| 1187 | ··-·PCI-DSSv4-2.2.6 | 1192 | ··-·PCI-DSSv4-2.2.6 |
| 1188 | ··-·enable_strategy | 1193 | ··-·enable_strategy |
| 1189 | ··-·low_complexity | 1194 | ··-·low_complexity |
| 1190 | ··-·low_disruption | 1195 | ··-·low_disruption |
| 1191 | ··-·medium_severity | 1196 | ··-·medium_severity |
| 1192 | ··-·no_reboot_needed | 1197 | ··-·no_reboot_needed |
| 1193 | ··-·package_sudo_installed | 1198 | ··-·package_sudo_installed |
| 1194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1195 | [[packages]] | ||
| 1196 | name·=·"sudo" | ||
| 1197 | version·=·"*" | ||
| 1198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1203 | include·install_sudo | 1204 | include·install_sudo |
| Offset 9502, 14 lines modified | Offset 9502, 19 lines modified | ||
| 9502 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9502 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9503 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9503 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9504 | ·····················00232 | 9504 | ·····················00232 |
| 9505 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9505 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9506 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9506 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9507 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9507 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9508 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9508 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9509 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9510 | [[packages]] | ||
| 9511 | name·=·"pam_apparmor" | ||
| 9512 | version·=·"*" | ||
| 9509 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9510 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9514 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9511 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9515 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9512 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9516 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9513 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9517 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9514 | #·Remediation·is·applicable·only·in·certain·platforms | 9518 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9515 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9519 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9541, 19 lines modified | Offset 9546, 14 lines modified | ||
| 9541 | ··-·NIST-800-53-SC-7(21) | 9546 | ··-·NIST-800-53-SC-7(21) |
| 9542 | ··-·enable_strategy | 9547 | ··-·enable_strategy |
| 9543 | ··-·low_complexity | 9548 | ··-·low_complexity |
| 9544 | ··-·low_disruption | 9549 | ··-·low_disruption |
| 9545 | ··-·medium_severity | 9550 | ··-·medium_severity |
| 9546 | ··-·no_reboot_needed | 9551 | ··-·no_reboot_needed |
| 9547 | ··-·package_pam_apparmor_installed | 9552 | ··-·package_pam_apparmor_installed |
| 9548 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9549 | [[packages]] | ||
| 9550 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 48372/53851 bytes (89.83%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16981, 129 lines modified | Offset 16981, 129 lines modified | ||
| 00042540:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 00042540:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 00042550:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00042550:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00042560:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00042560:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00042570:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00042570:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00042580:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00042580:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00042590:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00042590:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000425a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000425a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 000425b0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 000425c0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 000425d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000425e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000425f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042600:·3d22·6964·6d35·3338·3922·3e3c·7072·653e··="idm5389"><pre> | |||
| 00042610:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00042620:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 00042630:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 000425b0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 000425c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 000425d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000425e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000425f0:·2069·643d·2269·646d·3533·3839·223e·3c74···id="idm5389"><t | |||
| 00042600:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00042610:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00042620:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00042630:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00042640:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00042650:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00042660:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00042670:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00042680:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00042690:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000426a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 000426b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000426c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 000426d0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 000426e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 000426f0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 00042700:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 00042710:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 00042720:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 00042730:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 00042740:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 00042750:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 00042760:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 00042770:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 00042780:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 00042790:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 000427a0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 000427b0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 000427c0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 000427d0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 000427e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000427f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00042800:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00042810:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00042820:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00042830:·3533·3930·2220·7461·6269·6e64·6578·3d22··5390"·tabindex=" | |||
| 00042840:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00042850:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00042860:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00042870:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00042880:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00042890:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 000428a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 000428b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 000428c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 000428d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 000428e0:·3339·3022·3e3c·7461·626c·6520·636c·6173··390"><table·clas | |||
| 000428f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00042900:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00042910:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00042920:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00042930:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00042940:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00042950:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00042960:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00042970:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00042980:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00042990:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 000429a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 000429b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 000429c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 000429d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 000429e0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 000429f0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 00042a00:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 00042a10:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 00042a20:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 00042a30:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 00042a40:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 00042a50:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 00042a60:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 00042a70:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 00042a80:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 00042a90:·0a20·202d·2043·4345·2d38·3330·3637·2d39··.··-·CCE-83067-9 | |||
| 00042aa0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 00042ab0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 00042ac0:·2d53·4c45·532d·3132·2d30·3130·3439·390a··-SLES-12-010499. | |||
| 00042ad0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00042ae0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 00042af0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 00042b00:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 00042b10:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00042b20:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00042b30:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00042b40:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00042b50:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00042b60:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00042b70:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00042b80:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 00042 | 00042640:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| Max diff block lines reached; 408326/425906 bytes (95.87%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 529, 14 lines modified | Offset 529, 19 lines modified | ||
| 529 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 529 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 530 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 530 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 532 | ·············_\x8c_\x8i_\x8s············1.4.1 | 532 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 533 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 533 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 534 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 534 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 535 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 535 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 537 | [[packages]] | ||
| 538 | name·=·"aide" | ||
| 539 | version·=·"*" | ||
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 541 | #·Remediation·is·applicable·only·in·certain·platforms | 545 | #·Remediation·is·applicable·only·in·certain·platforms |
| 542 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 546 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 565, 19 lines modified | Offset 570, 14 lines modified | ||
| 565 | ··-·PCI-DSSv4-11.5.2 | 570 | ··-·PCI-DSSv4-11.5.2 |
| 566 | ··-·enable_strategy | 571 | ··-·enable_strategy |
| 567 | ··-·low_complexity | 572 | ··-·low_complexity |
| 568 | ··-·low_disruption | 573 | ··-·low_disruption |
| 569 | ··-·medium_severity | 574 | ··-·medium_severity |
| 570 | ··-·no_reboot_needed | 575 | ··-·no_reboot_needed |
| 571 | ··-·package_aide_installed | 576 | ··-·package_aide_installed |
| 572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 573 | [[packages]] | ||
| 574 | name·=·"aide" | ||
| 575 | version·=·"*" | ||
| 576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 581 | include·install_aide | 582 | include·install_aide |
| Offset 7473, 14 lines modified | Offset 7473, 18 lines modified | ||
| 7473 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled | 7473 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled |
| 7474 | Identifiers:·CCE-91646-0 | 7474 | Identifiers:·CCE-91646-0 |
| 7475 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 7475 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 7476 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 | 7476 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 7477 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7477 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7478 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 | 7478 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 |
| 7479 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 7479 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 7480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7481 | [customizations.services] | ||
| 7482 | enabled·=·["pcscd"] | ||
| 7480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7485 | #·Remediation·is·applicable·only·in·certain·platforms | 7488 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7489 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7532, 18 lines modified | Offset 7536, 14 lines modified | ||
| 7532 | ··-·PCI-DSS-Req-8.3 | 7536 | ··-·PCI-DSS-Req-8.3 |
| 7533 | ··-·enable_strategy | 7537 | ··-·enable_strategy |
| 7534 | ··-·low_complexity | 7538 | ··-·low_complexity |
| 7535 | ··-·low_disruption | 7539 | ··-·low_disruption |
| 7536 | ··-·medium_severity | 7540 | ··-·medium_severity |
| 7537 | ··-·no_reboot_needed | 7541 | ··-·no_reboot_needed |
| 7538 | ··-·service_pcscd_enabled | 7542 | ··-·service_pcscd_enabled |
| 7539 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7540 | [customizations.services] | ||
| 7541 | enabled·=·["pcscd"] | ||
| 7542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7543 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7544 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7545 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7546 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7547 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7547 | include·enable_pcscd | 7548 | include·enable_pcscd |
| Offset 9804, 14 lines modified | Offset 9804, 19 lines modified | ||
| 9804 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 9804 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 9805 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 9805 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 9806 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 9806 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 9807 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 9807 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 9808 | ·············_\x8c_\x8i_\x8s············4.2.4 | 9808 | ·············_\x8c_\x8i_\x8s············4.2.4 |
| 9809 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 9809 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 9810 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 9810 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 9811 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9812 | [[packages]] | ||
| 9813 | name·=·"logrotate" | ||
| 9814 | version·=·"*" | ||
| 9811 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9815 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9812 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9816 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9813 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9817 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9814 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9818 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9815 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9819 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9816 | #·Remediation·is·applicable·only·in·certain·platforms | 9820 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9817 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9821 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9838, 19 lines modified | Offset 9843, 14 lines modified | ||
| 9838 | ··-·PCI-DSSv4-10.5.1 | 9843 | ··-·PCI-DSSv4-10.5.1 |
| 9839 | ··-·enable_strategy | 9844 | ··-·enable_strategy |
| 9840 | ··-·low_complexity | 9845 | ··-·low_complexity |
| 9841 | ··-·low_disruption | 9846 | ··-·low_disruption |
| 9842 | ··-·medium_severity | 9847 | ··-·medium_severity |
| 9843 | ··-·no_reboot_needed | 9848 | ··-·no_reboot_needed |
| 9844 | ··-·package_logrotate_installed | 9849 | ··-·package_logrotate_installed |
| 9845 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9846 | [[packages]] | ||
| 9847 | name·=·"logrotate" | ||
| 9848 | version·=·"*" | ||
| 9849 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 19923/25538 bytes (78.01%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e00:·323 | 00037e00:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16926, 129 lines modified | Offset 16926, 129 lines modified | ||
| 000421d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000421d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000421e0:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 000421e0:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 000421f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000421f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00042200:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00042200:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00042210:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00042210:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00042220:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00042220:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00042230:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00042230:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00042240:·6d65·6469·6174·696f·6e20· | 00042240:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00042250:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00042260:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042270:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042280:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042290:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 00042250:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00042260:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042270:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042280:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 00042290:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 000422a0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 000422b0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000422c0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 000422d0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 000422e0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 000422f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00042300:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00042310:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00042320:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00042330:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00042340:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00042350:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00042360:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00042370:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00042 | 000422a0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 000422b0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000422c0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 00042390:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 000423a0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 000423b0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 000423c0:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 000423d0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 000423e0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 000423f0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 00042400:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 00042410:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 00042420:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 00042430:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 00042440:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 00042450:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 00042460:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 00042470:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00042480:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00042490:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 000424a0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 000424b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 000424c0:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | |||
| 000424d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 000424e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 000424f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00042500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00042510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00042520:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 00042530:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00042540:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00042550:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00042560:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042570:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 00042580:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00042590:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000425a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 000425b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 000425c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 000425d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000425e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000425f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00042600:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00042610:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00042620:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00042630:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00042640:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00042650:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00042660:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00042670:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00042680:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00042690:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 000426a0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 000426b0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 000426c0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000426d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000426e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000426f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00042700:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00042710:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00042720:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 00042730:·3330·3637·2d39·0a20·202d·2043·4a49·532d··3067-9.··-·CJIS- | |||
| 00042740:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 00042750:·412d·5354·4947·2d53·4c45·532d·3132·2d30··A-STIG-SLES-12-0 | |||
| 00042760:·3130·3439·390a·2020·2d20·4e49·5354·2d38··10499.··-·NIST-8 | |||
| 00042770:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00042780:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 00042790:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 000427a0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 000427b0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 000427c0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 000427d0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 000427e0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 000427f0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00042800:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 00042810:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 00042 | 000422d0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 00042 | 000422e0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 00042 | 000422f0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| Max diff block lines reached; 218132/235712 bytes (92.54%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 519, 14 lines modified | Offset 519, 19 lines modified | ||
| 519 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 519 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 521 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 521 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 522 | ·············_\x8c_\x8i_\x8s············1.4.1 | 522 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 523 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 523 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 524 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 524 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 525 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 525 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 527 | [[packages]] | ||
| 528 | name·=·"aide" | ||
| 529 | version·=·"*" | ||
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 527 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 528 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 529 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 530 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 531 | #·Remediation·is·applicable·only·in·certain·platforms | 535 | #·Remediation·is·applicable·only·in·certain·platforms |
| 532 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 536 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 555, 19 lines modified | Offset 560, 14 lines modified | ||
| 555 | ··-·PCI-DSSv4-11.5.2 | 560 | ··-·PCI-DSSv4-11.5.2 |
| 556 | ··-·enable_strategy | 561 | ··-·enable_strategy |
| 557 | ··-·low_complexity | 562 | ··-·low_complexity |
| 558 | ··-·low_disruption | 563 | ··-·low_disruption |
| 559 | ··-·medium_severity | 564 | ··-·medium_severity |
| 560 | ··-·no_reboot_needed | 565 | ··-·no_reboot_needed |
| 561 | ··-·package_aide_installed | 566 | ··-·package_aide_installed |
| 562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 563 | [[packages]] | ||
| 564 | name·=·"aide" | ||
| 565 | version·=·"*" | ||
| 566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 567 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 567 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 568 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 568 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 569 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 569 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 570 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 570 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 571 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 571 | include·install_aide | 572 | include·install_aide |
| Offset 7463, 14 lines modified | Offset 7463, 18 lines modified | ||
| 7463 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled | 7463 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled |
| 7464 | Identifiers:·CCE-91646-0 | 7464 | Identifiers:·CCE-91646-0 |
| 7465 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 7465 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 7466 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 | 7466 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 7467 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7467 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7468 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 | 7468 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 |
| 7469 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 7469 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 7470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7471 | [customizations.services] | ||
| 7472 | enabled·=·["pcscd"] | ||
| 7470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7475 | #·Remediation·is·applicable·only·in·certain·platforms | 7478 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7476 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7479 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7522, 18 lines modified | Offset 7526, 14 lines modified | ||
| 7522 | ··-·PCI-DSS-Req-8.3 | 7526 | ··-·PCI-DSS-Req-8.3 |
| 7523 | ··-·enable_strategy | 7527 | ··-·enable_strategy |
| 7524 | ··-·low_complexity | 7528 | ··-·low_complexity |
| 7525 | ··-·low_disruption | 7529 | ··-·low_disruption |
| 7526 | ··-·medium_severity | 7530 | ··-·medium_severity |
| 7527 | ··-·no_reboot_needed | 7531 | ··-·no_reboot_needed |
| 7528 | ··-·service_pcscd_enabled | 7532 | ··-·service_pcscd_enabled |
| 7529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7530 | [customizations.services] | ||
| 7531 | enabled·=·["pcscd"] | ||
| 7532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7533 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7533 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7534 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7534 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7535 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7535 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7536 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7536 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7537 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7537 | include·enable_pcscd | 7538 | include·enable_pcscd |
| Offset 9571, 14 lines modified | Offset 9571, 19 lines modified | ||
| 9571 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 9571 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 9572 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 9572 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 9573 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 9573 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 9574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 9574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 9575 | ·············_\x8c_\x8i_\x8s············4.2.4 | 9575 | ·············_\x8c_\x8i_\x8s············4.2.4 |
| 9576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 9576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 9577 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 9577 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 9578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9579 | [[packages]] | ||
| 9580 | name·=·"logrotate" | ||
| 9581 | version·=·"*" | ||
| 9578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9582 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9579 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9583 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9580 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9584 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9581 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9585 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9582 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9586 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9583 | #·Remediation·is·applicable·only·in·certain·platforms | 9587 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9584 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9588 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9605, 19 lines modified | Offset 9610, 14 lines modified | ||
| 9605 | ··-·PCI-DSSv4-10.5.1 | 9610 | ··-·PCI-DSSv4-10.5.1 |
| 9606 | ··-·enable_strategy | 9611 | ··-·enable_strategy |
| 9607 | ··-·low_complexity | 9612 | ··-·low_complexity |
| 9608 | ··-·low_disruption | 9613 | ··-·low_disruption |
| 9609 | ··-·medium_severity | 9614 | ··-·medium_severity |
| 9610 | ··-·no_reboot_needed | 9615 | ··-·no_reboot_needed |
| 9611 | ··-·package_logrotate_installed | 9616 | ··-·package_logrotate_installed |
| 9612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9613 | [[packages]] | ||
| 9614 | name·=·"logrotate" | ||
| 9615 | version·=·"*" | ||
| 9616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9617 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 10086/15703 bytes (64.23%) of diff not shown. | |||
| Offset 14304, 16 lines modified | Offset 14304, 16 lines modified | ||
| 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·2020·2028·6173·206f·6620·3230·323 | 00037e60:·2020·2028·6173·206f·6620·3230·3236·2d30·····(as·of·2026-0 | ||
| 00037e70:·3 | 00037e70:·312d·3238·290a·2020·2020·2020·2020·2020··1-28).·········· | ||
| 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys |
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group | 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group |
| 53 | contains·4·groups·and·3·rules | 53 | contains·4·groups·and·3·rules |
| 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 129 lines modified | Offset 15107, 129 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20· | 0003b090:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b0b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0e0:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b0a0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b0e0:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 0003b0f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b100:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b110:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b120:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b130:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b140:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b150:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b160:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b170:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b180:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b190:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b1a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b1b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b1c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b100:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b110:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b120:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b1e0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b1f0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b200:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b210:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003b220:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b230:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b240:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b250:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003b260:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b270:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b280:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b290:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b2a0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b2b0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b2c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b2e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b2f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b310:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | |||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b380:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3c0:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 0003b3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b3f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b410:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b420:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b430:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b440:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b450:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b470:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b490:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4c0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b4f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b500:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b510:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b520:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b530:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b540:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b550:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b560:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b570:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003b580:·3330·3637·2d39·0a20·202d·2043·4a49·532d··3067-9.··-·CJIS- | |||
| 0003b590:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5a0:·412d·5354·4947·2d53·4c45·532d·3132·2d30··A-STIG-SLES-12-0 | |||
| 0003b5b0:·3130·3439·390a·2020·2d20·4e49·5354·2d38··10499.··-·NIST-8 | |||
| 0003b5c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b5d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b5e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b5f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b600:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b610:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b620:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b630:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b640:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b650:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b660:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b670:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b | 0003b130:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| Max diff block lines reached; 274412/291992 bytes (93.98%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 131 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 150, 19 lines modified | Offset 155, 14 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 157 | ··-·low_complexity |
| 153 | ··-·low_disruption | 158 | ··-·low_disruption |
| 154 | ··-·medium_severity | 159 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | include·install_aide | 167 | include·install_aide |
| Offset 9475, 14 lines modified | Offset 9475, 19 lines modified | ||
| 9475 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed | 9475 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed |
| 9476 | Identifiers:·CCE-83009-1 | 9476 | Identifiers:·CCE-83009-1 |
| 9477 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 9477 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 9478 | ·············_\x8n_\x8i_\x8s_\x8t····AC-11(a),·AC-11(b),·AC-11(1) | 9478 | ·············_\x8n_\x8i_\x8s_\x8t····AC-11(a),·AC-11(b),·AC-11(1) |
| 9479 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 9479 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 9480 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010070 | 9480 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010070 |
| 9481 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217108r603262_rule | 9481 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217108r603262_rule |
| 9482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9483 | [[packages]] | ||
| 9484 | name·=·"kbd" | ||
| 9485 | version·=·"*" | ||
| 9482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9487 | #·Remediation·is·applicable·only·in·certain·platforms | 9491 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9488 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9492 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9510, 19 lines modified | Offset 9515, 14 lines modified | ||
| 9510 | ··-·NIST-800-53-AC-11(b) | 9515 | ··-·NIST-800-53-AC-11(b) |
| 9511 | ··-·enable_strategy | 9516 | ··-·enable_strategy |
| 9512 | ··-·low_complexity | 9517 | ··-·low_complexity |
| 9513 | ··-·low_disruption | 9518 | ··-·low_disruption |
| 9514 | ··-·medium_severity | 9519 | ··-·medium_severity |
| 9515 | ··-·no_reboot_needed | 9520 | ··-·no_reboot_needed |
| 9516 | ··-·vlock_installed | 9521 | ··-·vlock_installed |
| 9517 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9518 | [[packages]] | ||
| 9519 | name·=·"kbd" | ||
| 9520 | version·=·"*" | ||
| 9521 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9522 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9522 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9523 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9523 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9524 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9524 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9525 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9525 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9526 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9526 | include·install_kbd | 9527 | include·install_kbd |
| Offset 12520, 14 lines modified | Offset 12520, 19 lines modified | ||
| 12520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 12520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 12521 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 12521 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 12522 | ·····················00232 | 12522 | ·····················00232 |
| 12523 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 12523 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 12524 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 12524 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 12525 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 12525 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 12526 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 12526 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 12527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12528 | [[packages]] | ||
| 12529 | name·=·"pam_apparmor" | ||
| 12530 | version·=·"*" | ||
| 12527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 12531 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 12528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 12532 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 12529 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 12533 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 12530 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 12534 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 12531 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 12535 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 12532 | #·Remediation·is·applicable·only·in·certain·platforms | 12536 | #·Remediation·is·applicable·only·in·certain·platforms |
| 12533 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 12537 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 12559, 19 lines modified | Offset 12564, 14 lines modified | ||
| 12559 | ··-·NIST-800-53-SC-7(21) | 12564 | ··-·NIST-800-53-SC-7(21) |
| 12560 | ··-·enable_strategy | 12565 | ··-·enable_strategy |
| 12561 | ··-·low_complexity | 12566 | ··-·low_complexity |
| 12562 | ··-·low_disruption | 12567 | ··-·low_disruption |
| 12563 | ··-·medium_severity | 12568 | ··-·medium_severity |
| 12564 | ··-·no_reboot_needed | 12569 | ··-·no_reboot_needed |
| 12565 | ··-·package_pam_apparmor_installed | 12570 | ··-·package_pam_apparmor_installed |
| 12566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12567 | [[packages]] | ||
| 12568 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 15964/21514 bytes (74.20%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 129 lines modified | Offset 15134, 129 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b250:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b270:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b280:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b290:·3d22·6964·6d36·3333·3222·3e3c·7072·653e··="idm6332"><pre> | |||
| 0003b2a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2b0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2c0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b240:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b250:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b260:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b270:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b280:·2069·643d·2269·646d·3633·3332·223e·3c74···id="idm6332"><t | |||
| 0003b290:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b2a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b2b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b2c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b2d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b300:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b310:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b320:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b330:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b340:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b350:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b360:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b370:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b380:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b390:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b3a0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b3b0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003b3c0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b3d0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b3e0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b3f0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003b400:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 0003b410:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 0003b420:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b430:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b440:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b450:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b460:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b470:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b480:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b490:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b4a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b4b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b4c0:·3633·3333·2220·7461·6269·6e64·6578·3d22··6333"·tabindex=" | |||
| 0003b4d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b4e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b4f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b500:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b510:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b520:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b530:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b540:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b550:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b560:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b570:·3333·3322·3e3c·7461·626c·6520·636c·6173··333"><table·clas | |||
| 0003b580:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b590:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b5a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b5b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b5c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b5d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b5e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b5f0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b600:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b610:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b620:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b630:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b640:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b660:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b670:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b680:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b690:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b6a0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b6b0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b6c0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b6d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b6e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b6f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b700:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b710:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b720:·0a20·202d·2043·4345·2d38·3332·3839·2d39··.··-·CCE-83289-9 | |||
| 0003b730:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b740:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b750:·2d53·4c45·532d·3135·2d30·3130·3431·390a··-SLES-15-010419. | |||
| 0003b760:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b770:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b780:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b790:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b7a0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b7b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b7c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b7d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b7e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b7f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b800:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b810:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| Max diff block lines reached; 512324/529904 bytes (96.68%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 553, 14 lines modified | Offset 553, 19 lines modified | ||
| 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 565 | #·Remediation·is·applicable·only·in·certain·platforms | 569 | #·Remediation·is·applicable·only·in·certain·platforms |
| 566 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 586, 19 lines modified | Offset 591, 14 lines modified | ||
| 586 | ··-·PCI-DSSv4-2.2.6 | 591 | ··-·PCI-DSSv4-2.2.6 |
| 587 | ··-·enable_strategy | 592 | ··-·enable_strategy |
| 588 | ··-·low_complexity | 593 | ··-·low_complexity |
| 589 | ··-·low_disruption | 594 | ··-·low_disruption |
| 590 | ··-·medium_severity | 595 | ··-·medium_severity |
| 591 | ··-·no_reboot_needed | 596 | ··-·no_reboot_needed |
| 592 | ··-·package_sudo_installed | 597 | ··-·package_sudo_installed |
| 593 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 594 | [[packages]] | ||
| 595 | name·=·"sudo" | ||
| 596 | version·=·"*" | ||
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 602 | include·install_sudo | 603 | include·install_sudo |
| Offset 1392, 14 lines modified | Offset 1392, 19 lines modified | ||
| 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1393 | ·············automatic,·regular·execution. | 1393 | ·············automatic,·regular·execution. |
| 1394 | Severity: ···medium | 1394 | Severity: ···medium |
| 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1396 | Identifiers:·CCE-91163-6 | 1396 | Identifiers:·CCE-91163-6 |
| 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1400 | [[packages]] | ||
| 1401 | name·=·"dnf-automatic" | ||
| 1402 | version·=·"*" | ||
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1404 | zypper·install·-y·"dnf-automatic" | 1408 | zypper·install·-y·"dnf-automatic" |
| Offset 1416, 19 lines modified | Offset 1421, 14 lines modified | ||
| 1416 | ··-·CCE-91163-6 | 1421 | ··-·CCE-91163-6 |
| 1417 | ··-·enable_strategy | 1422 | ··-·enable_strategy |
| 1418 | ··-·low_complexity | 1423 | ··-·low_complexity |
| 1419 | ··-·low_disruption | 1424 | ··-·low_disruption |
| 1420 | ··-·medium_severity | 1425 | ··-·medium_severity |
| 1421 | ··-·no_reboot_needed | 1426 | ··-·no_reboot_needed |
| 1422 | ··-·package_dnf-automatic_installed | 1427 | ··-·package_dnf-automatic_installed |
| 1423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1424 | [[packages]] | ||
| 1425 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 26979/32266 bytes (83.61%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 129 lines modified | Offset 15139, 129 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·2053· | 0003b290:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b2a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2e0:·2069·643d·2269·646d·3633·3332·223e·3c70···id="idm6332"><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b300:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b310:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b2a0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b2b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b2c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b2d0:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b2e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b300:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b310:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b320:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b330:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b340:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b350:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b360:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b370:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b380:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b390:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b3a0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b3b0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b3c0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b3d0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b3e0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b3f0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b400:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b410:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b420:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b430:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b440:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b450:·6865·6e0a·0a7a·7970·7065·7220·696e·7374··hen..zypper·inst | |||
| 0003b460:·616c·6c20·2d79·2022·6169·6465·220a·0a65··all·-y·"aide"..e | |||
| 0003b470:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b480:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b490:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b4a0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b4b0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003b4c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b4e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b4f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b500:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b510:·6964·6d36·3333·3322·2074·6162·696e·6465··idm6333"·tabinde | |||
| 0003b520:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b530:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b540:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b550:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b560:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b570:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b580:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b590:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5c0:·646d·3633·3333·223e·3c74·6162·6c65·2063··dm6333"><table·c | |||
| 0003b5d0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5e0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b5f0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b600:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b610:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b640:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b650:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b660:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b670:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b680:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b690:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b6a0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b6b0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b6c0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b6d0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b6e0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b6f0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b700:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b710:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b720:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b730:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b740:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b750:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b760:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b770:·6773·3a0a·2020·2d20·4343·452d·3833·3238··gs:.··-·CCE-8328 | |||
| 0003b780:·392d·390a·2020·2d20·434a·4953·2d35·2e31··9-9.··-·CJIS-5.1 | |||
| 0003b790:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b7a0:·5449·472d·534c·4553·2d31·352d·3031·3034··TIG-SLES-15-0104 | |||
| 0003b7b0:·3139·0a20·202d·204e·4953·542d·3830·302d··19.··-·NIST-800- | |||
| 0003b7c0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b7d0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b7e0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b7f0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b800:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b810:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b820:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b830:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b840:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b850:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b860:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b | 0003b320:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b330:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| Max diff block lines reached; 512462/530042 bytes (96.68%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 126 | ·············_\x8c_\x8i_\x8s············1.4.1 | 126 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 159, 19 lines modified | Offset 164, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 166 | ··-·low_complexity |
| 162 | ··-·low_disruption | 167 | ··-·low_disruption |
| 163 | ··-·medium_severity | 168 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | 176 | include·install_aide |
| Offset 1157, 14 lines modified | Offset 1157, 19 lines modified | ||
| 1157 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1157 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1158 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1158 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1159 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1159 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1160 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1160 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1161 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1161 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1162 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1162 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1163 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1163 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1165 | [[packages]] | ||
| 1166 | name·=·"sudo" | ||
| 1167 | version·=·"*" | ||
| 1164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1169 | #·Remediation·is·applicable·only·in·certain·platforms | 1173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1190, 19 lines modified | Offset 1195, 14 lines modified | ||
| 1190 | ··-·PCI-DSSv4-2.2.6 | 1195 | ··-·PCI-DSSv4-2.2.6 |
| 1191 | ··-·enable_strategy | 1196 | ··-·enable_strategy |
| 1192 | ··-·low_complexity | 1197 | ··-·low_complexity |
| 1193 | ··-·low_disruption | 1198 | ··-·low_disruption |
| 1194 | ··-·medium_severity | 1199 | ··-·medium_severity |
| 1195 | ··-·no_reboot_needed | 1200 | ··-·no_reboot_needed |
| 1196 | ··-·package_sudo_installed | 1201 | ··-·package_sudo_installed |
| 1197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1198 | [[packages]] | ||
| 1199 | name·=·"sudo" | ||
| 1200 | version·=·"*" | ||
| 1201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1206 | include·install_sudo | 1207 | include·install_sudo |
| Offset 1996, 14 lines modified | Offset 1996, 19 lines modified | ||
| 1996 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1996 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1997 | ·············automatic,·regular·execution. | 1997 | ·············automatic,·regular·execution. |
| 1998 | Severity: ···medium | 1998 | Severity: ···medium |
| 1999 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1999 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 2000 | Identifiers:·CCE-91163-6 | 2000 | Identifiers:·CCE-91163-6 |
| 2001 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 2001 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 2002 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 2002 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 2003 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2004 | [[packages]] | ||
| 2005 | name·=·"dnf-automatic" | ||
| 2006 | version·=·"*" | ||
| 2003 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2007 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2004 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2008 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2005 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2009 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2006 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2010 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2007 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2011 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2008 | zypper·install·-y·"dnf-automatic" | 2012 | zypper·install·-y·"dnf-automatic" |
| Offset 2020, 19 lines modified | Offset 2025, 14 lines modified | ||
| 2020 | ··-·CCE-91163-6 | 2025 | ··-·CCE-91163-6 |
| 2021 | ··-·enable_strategy | 2026 | ··-·enable_strategy |
| 2022 | ··-·low_complexity | 2027 | ··-·low_complexity |
| 2023 | ··-·low_disruption | 2028 | ··-·low_disruption |
| 2024 | ··-·medium_severity | 2029 | ··-·medium_severity |
| 2025 | ··-·no_reboot_needed | 2030 | ··-·no_reboot_needed |
| 2026 | ··-·package_dnf-automatic_installed | 2031 | ··-·package_dnf-automatic_installed |
| 2027 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2028 | [[packages]] | ||
| 2029 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 27186/32481 bytes (83.70%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 129 lines modified | Offset 15125, 129 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | ||
| 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b1c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b1d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b200:·643d·2269·646d·3633·3332·223e·3c70·7265··d="idm6332"><pre | |||
| 0003b210:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b220:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b230:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b1b0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b1c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1f0:·2220·6964·3d22·6964·6d36·3333·3222·3e3c··"·id="idm6332">< | |||
| 0003b200:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b210:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b220:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b230:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b240:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b250:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b260:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b270:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b280:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b290:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b2b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b2d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b2e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b2f0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003b300:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b310:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b320:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b330:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003b340:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003b350:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003b360:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003b370:·6e0a·0a7a·7970·7065·7220·696e·7374·616c··n..zypper·instal | |||
| 0003b380:·6c20·2d79·2022·6169·6465·220a·0a65·6c73··l·-y·"aide"..els | |||
| 0003b390:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b3a0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b3b0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b3c0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b3d0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b3e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b3f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b400:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b410:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b420:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b430:·6d36·3333·3322·2074·6162·696e·6465·783d··m6333"·tabindex= | |||
| 0003b440:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b450:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b460:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b470:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b480:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b490:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b4a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4e0:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | |||
| 0003b4f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b500:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b510:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b520:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b530:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b540:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b550:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b560:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b570:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b580:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b590:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b5a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b5d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b5e0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b5f0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b600:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b610:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b620:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b630:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b640:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b650:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b660:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b670:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b680:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b690:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b6a0:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b6b0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b6c0:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b6d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b6e0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b6f0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b700:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b710:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b720:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b730:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b740:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b750:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b760:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b770:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b780:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b | 0003b240:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| Max diff block lines reached; 366950/384530 bytes (95.43%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 533, 14 lines modified | Offset 533, 19 lines modified | ||
| 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 541 | [[packages]] | ||
| 542 | name·=·"sudo" | ||
| 543 | version·=·"*" | ||
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 545 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 546 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 547 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 548 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 545 | #·Remediation·is·applicable·only·in·certain·platforms | 549 | #·Remediation·is·applicable·only·in·certain·platforms |
| 546 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 550 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 566, 19 lines modified | Offset 571, 14 lines modified | ||
| 566 | ··-·PCI-DSSv4-2.2.6 | 571 | ··-·PCI-DSSv4-2.2.6 |
| 567 | ··-·enable_strategy | 572 | ··-·enable_strategy |
| 568 | ··-·low_complexity | 573 | ··-·low_complexity |
| 569 | ··-·low_disruption | 574 | ··-·low_disruption |
| 570 | ··-·medium_severity | 575 | ··-·medium_severity |
| 571 | ··-·no_reboot_needed | 576 | ··-·no_reboot_needed |
| 572 | ··-·package_sudo_installed | 577 | ··-·package_sudo_installed |
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 574 | [[packages]] | ||
| 575 | name·=·"sudo" | ||
| 576 | version·=·"*" | ||
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 579 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 580 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 581 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 582 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 582 | include·install_sudo | 583 | include·install_sudo |
| Offset 1302, 14 lines modified | Offset 1302, 19 lines modified | ||
| 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1303 | ·············automatic,·regular·execution. | 1303 | ·············automatic,·regular·execution. |
| 1304 | Severity: ···medium | 1304 | Severity: ···medium |
| 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1306 | Identifiers:·CCE-91163-6 | 1306 | Identifiers:·CCE-91163-6 |
| 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1310 | [[packages]] | ||
| 1311 | name·=·"dnf-automatic" | ||
| 1312 | version·=·"*" | ||
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1314 | zypper·install·-y·"dnf-automatic" | 1318 | zypper·install·-y·"dnf-automatic" |
| Offset 1326, 19 lines modified | Offset 1331, 14 lines modified | ||
| 1326 | ··-·CCE-91163-6 | 1331 | ··-·CCE-91163-6 |
| 1327 | ··-·enable_strategy | 1332 | ··-·enable_strategy |
| 1328 | ··-·low_complexity | 1333 | ··-·low_complexity |
| 1329 | ··-·low_disruption | 1334 | ··-·low_disruption |
| 1330 | ··-·medium_severity | 1335 | ··-·medium_severity |
| 1331 | ··-·no_reboot_needed | 1336 | ··-·no_reboot_needed |
| 1332 | ··-·package_dnf-automatic_installed | 1337 | ··-·package_dnf-automatic_installed |
| 1333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1334 | [[packages]] | ||
| 1335 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 15722/21128 bytes (74.41%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·362d·3031·2d32·3829·0a20·2020···2026-01-28).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 106 lines modified | Offset 14793, 106 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | ||
| 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00039d00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00039d10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00039d20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00039d30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00039d40:·643d·2269·646d·3838·3931·223e·3c70·7265··d="idm8891"><pre | |||
| 00039d50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00039d60:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | |||
| 00039d70:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | |||
| 00039d80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00039cf0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00039d00:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d10:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039d20:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039d30:·2220·6964·3d22·6964·6d38·3839·3122·3e3c··"·id="idm8891">< | |||
| 00039d40:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00039d50:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00039d60:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00039d70:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00039d80:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00039d90:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00039da0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039db0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00039dc0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039dd0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00039de0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00039df0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039e00:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00039e10:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00039e20:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00039e30:·3e3c·636f·6465·3e0a·7a79·7070·6572·2069··><code>.zypper·i | |||
| 00039e40:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 00039e50:·7574·6f6d·6174·6963·220a·3c2f·636f·6465··utomatic".</code | |||
| 00039 | 00039d90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 00039 | 00039da0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 00039 | 00039db0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 00039 | 00039dc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 00039 | 00039dd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039 | 00039de0:·3838·3932·2220·7461·6269·6e64·6578·3d22··8892"·tabindex=" | ||
| 00039 | 00039df0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039e | 00039e00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039e | 00039e10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039e | 00039e20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039 | 00039e30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039e40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 00039e50:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00039e60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039e70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039e80:·7073·6522·2069·643d·2269·646d·3838·3932··pse"·id="idm8892 | |||
| 00039e90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039ea0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039f10:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00039f20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039f30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039f40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039f50:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00039f60:·3839·3222·3e3c·7461·626c·6520·636c·6173··892"><table·clas | |||
| 00039f70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039f80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039 | 00039eb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 00039fa0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039fb0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039fc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039 | 00039ec0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 00039ed0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039ee0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039ef0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039f00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039f10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039f20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039f | 00039f30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 00039f | 00039f40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003a000:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a010:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a020:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003 | 00039f50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 00039f60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039f70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039f80:·7072·653e·3c63·6f64·653e·0a7a·7970·7065··pre><code>.zyppe | |||
| 00039f90:·7220·696e·7374·616c·6c20·2d79·2022·646e··r·install·-y·"dn | |||
| 00039fa0:·662d·6175·746f·6d61·7469·6322·0a3c·2f63··f-automatic".</c | |||
| 00039fb0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039fc0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039fd0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039fe0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039ff0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a000:·6964·6d38·3839·3322·2074·6162·696e·6465··idm8893"·tabinde | |||
| 0003a010:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003a020:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003a030:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003a040:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003a050:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003a060:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003a070:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003a080:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a090:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a0a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a0b0:·646d·3838·3933·223e·3c74·6162·6c65·2063··dm8893"><table·c | |||
| 0003a0c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003a0d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003a0e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003a0f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003a100:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003a110:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| Max diff block lines reached; 414/14820 bytes (2.79%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 14 lines modified | Offset 87, 19 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | [[packages]] | ||
| 96 | name·=·"dnf-automatic" | ||
| 97 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | zypper·install·-y·"dnf-automatic" | 103 | zypper·install·-y·"dnf-automatic" |
| Offset 111, 19 lines modified | Offset 116, 14 lines modified | ||
| 111 | ··-·CCE-91163-6 | 116 | ··-·CCE-91163-6 |
| 112 | ··-·enable_strategy | 117 | ··-·enable_strategy |
| 113 | ··-·low_complexity | 118 | ··-·low_complexity |
| 114 | ··-·low_disruption | 119 | ··-·low_disruption |
| 115 | ··-·medium_severity | 120 | ··-·medium_severity |
| 116 | ··-·no_reboot_needed | 121 | ··-·no_reboot_needed |
| 117 | ··-·package_dnf-automatic_installed | 122 | ··-·package_dnf-automatic_installed |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | include·install_dnf-automatic | 128 | include·install_dnf-automatic |
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 129 lines modified | Offset 15171, 129 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | ||
| 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b4a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4e0:·6964·3d22·6964·6d36·3333·3222·3e3c·7072··id="idm6332"><pr | |||
| 0003b4f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b500:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b510:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b490:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b4a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b4b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4d0:·6522·2069·643d·2269·646d·3633·3332·223e··e"·id="idm6332"> | |||
| 0003b4e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b500:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b510:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b520:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b530:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b540:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b550:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b560:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b570:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b580:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b590:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b5a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b5b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5d0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b5e0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b5f0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b600:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b610:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b620:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b630:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b640:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b650:·656e·0a0a·7a79·7070·6572·2069·6e73·7461··en..zypper·insta | |||
| 0003b660:·6c6c·202d·7920·2261·6964·6522·0a0a·656c··ll·-y·"aide"..el | |||
| 0003b670:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b680:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b690:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b6a0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b6b0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b6c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b6d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b6e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b6f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b700:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b710:·646d·3633·3333·2220·7461·6269·6e64·6578··dm6333"·tabindex | |||
| 0003b720:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b730:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b740:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b750:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b760:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b770:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b780:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b790:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b7a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b7b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b7c0:·6d36·3333·3322·3e3c·7461·626c·6520·636c··m6333"><table·cl | |||
| 0003b7d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b7e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b7f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b800:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b810:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b820:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b830:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b840:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b850:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b860:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b870:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b880:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b890:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b8a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b8b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b8c0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b8d0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b8e0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b8f0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b900:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b910:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b920:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b930:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b940:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b950:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b960:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b970:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b980:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b990:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b9a0:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b9b0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b9c0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b9d0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b9e0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9f0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003ba00:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003ba10:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003ba20:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003ba30:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003ba40:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003ba50:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003ba60:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b520:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| Max diff block lines reached; 1150167/1167747 bytes (98.49%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 128, 14 lines modified | Offset 128, 19 lines modified | ||
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 131 | ·············_\x8c_\x8i_\x8s············1.4.1 | 131 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | 144 | #·Remediation·is·applicable·only·in·certain·platforms |
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 19 lines modified | Offset 169, 14 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 169 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 170 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 171 | ··-·low_complexity |
| 167 | ··-·low_disruption | 172 | ··-·low_disruption |
| 168 | ··-·medium_severity | 173 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 174 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 175 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | include·install_aide | 181 | include·install_aide |
| Offset 1022, 14 lines modified | Offset 1022, 19 lines modified | ||
| 1022 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1022 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1023 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1023 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1024 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1024 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1025 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1025 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1026 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1026 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1027 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1027 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1028 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1028 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1029 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1030 | [[packages]] | ||
| 1031 | name·=·"sudo" | ||
| 1032 | version·=·"*" | ||
| 1029 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1033 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1030 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1034 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1031 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1035 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1032 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1036 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1033 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1037 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1034 | #·Remediation·is·applicable·only·in·certain·platforms | 1038 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1035 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1039 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1055, 19 lines modified | Offset 1060, 14 lines modified | ||
| 1055 | ··-·PCI-DSSv4-2.2.6 | 1060 | ··-·PCI-DSSv4-2.2.6 |
| 1056 | ··-·enable_strategy | 1061 | ··-·enable_strategy |
| 1057 | ··-·low_complexity | 1062 | ··-·low_complexity |
| 1058 | ··-·low_disruption | 1063 | ··-·low_disruption |
| 1059 | ··-·medium_severity | 1064 | ··-·medium_severity |
| 1060 | ··-·no_reboot_needed | 1065 | ··-·no_reboot_needed |
| 1061 | ··-·package_sudo_installed | 1066 | ··-·package_sudo_installed |
| 1062 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1063 | [[packages]] | ||
| 1064 | name·=·"sudo" | ||
| 1065 | version·=·"*" | ||
| 1066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1067 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1068 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1069 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1070 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1071 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1071 | include·install_sudo | 1072 | include·install_sudo |
| Offset 9332, 14 lines modified | Offset 9332, 19 lines modified | ||
| 9332 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9332 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9333 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9333 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9334 | ·····················00232 | 9334 | ·····················00232 |
| 9335 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9335 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9336 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9336 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9337 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9337 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9338 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9338 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9340 | [[packages]] | ||
| 9341 | name·=·"pam_apparmor" | ||
| 9342 | version·=·"*" | ||
| 9339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9340 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9341 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9342 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9343 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9344 | #·Remediation·is·applicable·only·in·certain·platforms | 9348 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9345 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9349 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9371, 19 lines modified | Offset 9376, 14 lines modified | ||
| 9371 | ··-·NIST-800-53-SC-7(21) | 9376 | ··-·NIST-800-53-SC-7(21) |
| 9372 | ··-·enable_strategy | 9377 | ··-·enable_strategy |
| 9373 | ··-·low_complexity | 9378 | ··-·low_complexity |
| 9374 | ··-·low_disruption | 9379 | ··-·low_disruption |
| 9375 | ··-·medium_severity | 9380 | ··-·medium_severity |
| 9376 | ··-·no_reboot_needed | 9381 | ··-·no_reboot_needed |
| 9377 | ··-·package_pam_apparmor_installed | 9382 | ··-·package_pam_apparmor_installed |
| 9378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9379 | [[packages]] | ||
| 9380 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 59477/64940 bytes (91.59%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037ef0:·323 | 00037ef0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 129 lines modified | Offset 15149, 129 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·20 | 0003b330:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b340:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3633·3332·223e··e"·id="idm6332"> | |||
| 0003b340:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b350:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b360:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b370:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 0003b380:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b390:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b3a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b3b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b3c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b3d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b3e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b3f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b400:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b410:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b420:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b430:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b440:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b450:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b460:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003b390:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003b3a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b3b0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b480:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b490:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b4a0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b4b0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003b4c0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003b4d0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003b4e0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003b4f0:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b500:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b510:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b520:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b530:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b540:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b550:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b560:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b570:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b580:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b590:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b5a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b5b0:·2223·6964·6d36·3333·3322·2074·6162·696e··"#idm6333"·tabin | |||
| 0003b5c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b5d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b5e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b5f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b600:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b610:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b620:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b630:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b640:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b650:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b660:·2269·646d·3633·3333·223e·3c74·6162·6c65··"idm6333"><table | |||
| 0003b670:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b680:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b690:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b6b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b6c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b6e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b6f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b700:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b710:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b720:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b730:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b740:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b750:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b760:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b770:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b780:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b790:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b7a0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b7b0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b7c0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b7d0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b7e0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b7f0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b800:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b810:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | |||
| 0003b820:·3238·392d·390a·2020·2d20·434a·4953·2d35··289-9.··-·CJIS-5 | |||
| 0003b830:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b840:·2d53·5449·472d·534c·4553·2d31·352d·3031··-STIG-SLES-15-01 | |||
| 0003b850:·3034·3139·0a20·202d·204e·4953·542d·3830··0419.··-·NIST-80 | |||
| 0003b860:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b870:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b880:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b890:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b8a0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b8b0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b8c0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b8d0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b8e0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b8f0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b900:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b | 0003b3c0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | ||
| 0003b | 0003b3d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| Max diff block lines reached; 935537/953255 bytes (98.14%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 19 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 161, 19 lines modified | Offset 166, 14 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 168 | ··-·low_complexity |
| 164 | ··-·low_disruption | 169 | ··-·low_disruption |
| 165 | ··-·medium_severity | 170 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_aide | 178 | include·install_aide |
| Offset 912, 14 lines modified | Offset 912, 19 lines modified | ||
| 912 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 912 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 913 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 913 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 914 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 914 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 915 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 915 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 916 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 916 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 917 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 917 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 918 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 918 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 920 | [[packages]] | ||
| 921 | name·=·"sudo" | ||
| 922 | version·=·"*" | ||
| 919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 924 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 925 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 926 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 927 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 924 | #·Remediation·is·applicable·only·in·certain·platforms | 928 | #·Remediation·is·applicable·only·in·certain·platforms |
| 925 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 929 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 945, 19 lines modified | Offset 950, 14 lines modified | ||
| 945 | ··-·PCI-DSSv4-2.2.6 | 950 | ··-·PCI-DSSv4-2.2.6 |
| 946 | ··-·enable_strategy | 951 | ··-·enable_strategy |
| 947 | ··-·low_complexity | 952 | ··-·low_complexity |
| 948 | ··-·low_disruption | 953 | ··-·low_disruption |
| 949 | ··-·medium_severity | 954 | ··-·medium_severity |
| 950 | ··-·no_reboot_needed | 955 | ··-·no_reboot_needed |
| 951 | ··-·package_sudo_installed | 956 | ··-·package_sudo_installed |
| 952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 953 | [[packages]] | ||
| 954 | name·=·"sudo" | ||
| 955 | version·=·"*" | ||
| 956 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 957 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 958 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 958 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 959 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 959 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 960 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 960 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 961 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 961 | include·install_sudo | 962 | include·install_sudo |
| Offset 9222, 14 lines modified | Offset 9222, 19 lines modified | ||
| 9222 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9222 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9223 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9223 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9224 | ·····················00232 | 9224 | ·····················00232 |
| 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9226 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9226 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9227 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9227 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9230 | [[packages]] | ||
| 9231 | name·=·"pam_apparmor" | ||
| 9232 | version·=·"*" | ||
| 9229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9234 | #·Remediation·is·applicable·only·in·certain·platforms | 9238 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9235 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9239 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9261, 19 lines modified | Offset 9266, 14 lines modified | ||
| 9261 | ··-·NIST-800-53-SC-7(21) | 9266 | ··-·NIST-800-53-SC-7(21) |
| 9262 | ··-·enable_strategy | 9267 | ··-·enable_strategy |
| 9263 | ··-·low_complexity | 9268 | ··-·low_complexity |
| 9264 | ··-·low_disruption | 9269 | ··-·low_disruption |
| 9265 | ··-·medium_severity | 9270 | ··-·medium_severity |
| 9266 | ··-·no_reboot_needed | 9271 | ··-·no_reboot_needed |
| 9267 | ··-·package_pam_apparmor_installed | 9272 | ··-·package_pam_apparmor_installed |
| 9268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9269 | [[packages]] | ||
| 9270 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 48642/54111 bytes (89.89%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037f00:·2d3 | 00037f00:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 129 lines modified | Offset 15135, 129 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2a0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b260:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b270:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b280:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b290:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b2a0:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003b2b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b300:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b310:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b320:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b330:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b340:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b350:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b360:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b370:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b380:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b3a0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b3b0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b3c0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b3d0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b3e0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b3f0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b400:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b410:·5d3b·2074·6865·6e0a·0a7a·7970·7065·7220··];·then..zypper· | |||
| 0003b420:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b430:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003b440:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b450:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b460:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b470:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b480:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b490:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b4a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b4b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b4c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b4d0:·743d·2223·6964·6d36·3333·3322·2074·6162··t="#idm6333"·tab | |||
| 0003b4e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b4f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b500:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b510:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b520:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b530:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b540:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b550:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b560:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b570:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b580:·643d·2269·646d·3633·3333·223e·3c74·6162··d="idm6333"><tab | |||
| 0003b590:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b5a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b5b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b5c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b5d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b5e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b5f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b600:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b610:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b620:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b630:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b640:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b650:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b660:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b670:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b680:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b690:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b6a0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b6b0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b6c0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b6d0:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b6e0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b6f0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b700:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b710:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b720:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b730:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b740:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b750:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b760:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b770:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b780:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b790:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b7a0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b7b0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b7c0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b7d0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b7e0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b7f0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b800:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b810:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b820:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b830:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| Max diff block lines reached; 808556/826274 bytes (97.86%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 19 lines modified | Offset 163, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 165 | ··-·low_complexity |
| 161 | ··-·low_disruption | 166 | ··-·low_disruption |
| 162 | ··-·medium_severity | 167 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | 175 | include·install_aide |
| Offset 909, 14 lines modified | Offset 909, 19 lines modified | ||
| 909 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 909 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 910 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 910 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 911 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 911 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 912 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 912 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 913 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 913 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 914 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 914 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 915 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 915 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 916 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 917 | [[packages]] | ||
| 918 | name·=·"sudo" | ||
| 919 | version·=·"*" | ||
| 916 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 920 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 917 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 921 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 918 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 922 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 919 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 923 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 920 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 924 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 921 | #·Remediation·is·applicable·only·in·certain·platforms | 925 | #·Remediation·is·applicable·only·in·certain·platforms |
| 922 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 926 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 942, 19 lines modified | Offset 947, 14 lines modified | ||
| 942 | ··-·PCI-DSSv4-2.2.6 | 947 | ··-·PCI-DSSv4-2.2.6 |
| 943 | ··-·enable_strategy | 948 | ··-·enable_strategy |
| 944 | ··-·low_complexity | 949 | ··-·low_complexity |
| 945 | ··-·low_disruption | 950 | ··-·low_disruption |
| 946 | ··-·medium_severity | 951 | ··-·medium_severity |
| 947 | ··-·no_reboot_needed | 952 | ··-·no_reboot_needed |
| 948 | ··-·package_sudo_installed | 953 | ··-·package_sudo_installed |
| 949 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 950 | [[packages]] | ||
| 951 | name·=·"sudo" | ||
| 952 | version·=·"*" | ||
| 953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 954 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 954 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 955 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 955 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 956 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 956 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 957 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 957 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 958 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 958 | include·install_sudo | 959 | include·install_sudo |
| Offset 9219, 14 lines modified | Offset 9219, 19 lines modified | ||
| 9219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9220 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9220 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9221 | ·····················00232 | 9221 | ·····················00232 |
| 9222 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9222 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9223 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9223 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9227 | [[packages]] | ||
| 9228 | name·=·"pam_apparmor" | ||
| 9229 | version·=·"*" | ||
| 9226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9231 | #·Remediation·is·applicable·only·in·certain·platforms | 9235 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9232 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9236 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9258, 19 lines modified | Offset 9263, 14 lines modified | ||
| 9258 | ··-·NIST-800-53-SC-7(21) | 9263 | ··-·NIST-800-53-SC-7(21) |
| 9259 | ··-·enable_strategy | 9264 | ··-·enable_strategy |
| 9260 | ··-·low_complexity | 9265 | ··-·low_complexity |
| 9261 | ··-·low_disruption | 9266 | ··-·low_disruption |
| 9262 | ··-·medium_severity | 9267 | ··-·medium_severity |
| 9263 | ··-·no_reboot_needed | 9268 | ··-·no_reboot_needed |
| 9264 | ··-·package_pam_apparmor_installed | 9269 | ··-·package_pam_apparmor_installed |
| 9265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9266 | [[packages]] | ||
| 9267 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 43492/48971 bytes (88.81%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 129 lines modified | Offset 15162, 129 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·53 | 0003b400:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b410:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b420:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b430:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b440:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b450:·2220·6964·3d22·6964·6d36·3333·3222·3e3c··"·id="idm6332">< | |||
| 0003b460:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b470:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b480:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b450:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b460:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b470:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b480:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b490:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b4a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b4b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b4d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b4f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b500:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b510:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b520:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b530:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b540:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b550:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b560:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b570:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b580:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b590:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b5a0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b5b0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b5c0:·7468·656e·0a0a·7a79·7070·6572·2069·6e73··then..zypper·ins | |||
| 0003b5d0:·7461·6c6c·202d·7920·2261·6964·6522·0a0a··tall·-y·"aide".. | |||
| 0003b5e0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b5f0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b600:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b610:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b620:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b630:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b640:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b650:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b660:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b670:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b680:·2369·646d·3633·3333·2220·7461·6269·6e64··#idm6333"·tabind | |||
| 0003b690:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b6a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b6b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b6c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b6d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b6e0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b6f0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b700:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b710:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b720:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b730:·6964·6d36·3333·3322·3e3c·7461·626c·6520··idm6333"><table· | |||
| 0003b740:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b750:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b760:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b770:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b780:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b790:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b7a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b7b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b7c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b7d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b7e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b7f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b800:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b810:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b820:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b830:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b840:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b850:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b860:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b870:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b880:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b890:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b8a0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b8b0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b8c0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b8d0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b8e0:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 0003b8f0:·3839·2d39·0a20·202d·2043·4a49·532d·352e··89-9.··-·CJIS-5. | |||
| 0003b900:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b910:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 0003b920:·3431·390a·2020·2d20·4e49·5354·2d38·3030··419.··-·NIST-800 | |||
| 0003b930:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b940:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b950:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b960:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b970:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b980:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b990:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b9a0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b9b0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b9c0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b9d0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b490:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| Max diff block lines reached; 1113498/1131078 bytes (98.45%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 19 lines modified | ||
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | 142 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 19 lines modified | Offset 167, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 169 | ··-·low_complexity |
| 165 | ··-·low_disruption | 170 | ··-·low_disruption |
| 166 | ··-·medium_severity | 171 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | include·install_aide | 179 | include·install_aide |
| Offset 1020, 14 lines modified | Offset 1020, 19 lines modified | ||
| 1020 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1020 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1021 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1021 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1022 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1022 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1023 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1023 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1024 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1024 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1025 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1025 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1026 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1026 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1027 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1028 | [[packages]] | ||
| 1029 | name·=·"sudo" | ||
| 1030 | version·=·"*" | ||
| 1027 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1031 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1028 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1032 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1029 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1033 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1030 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1034 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1031 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1035 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1032 | #·Remediation·is·applicable·only·in·certain·platforms | 1036 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1033 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1037 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1053, 19 lines modified | Offset 1058, 14 lines modified | ||
| 1053 | ··-·PCI-DSSv4-2.2.6 | 1058 | ··-·PCI-DSSv4-2.2.6 |
| 1054 | ··-·enable_strategy | 1059 | ··-·enable_strategy |
| 1055 | ··-·low_complexity | 1060 | ··-·low_complexity |
| 1056 | ··-·low_disruption | 1061 | ··-·low_disruption |
| 1057 | ··-·medium_severity | 1062 | ··-·medium_severity |
| 1058 | ··-·no_reboot_needed | 1063 | ··-·no_reboot_needed |
| 1059 | ··-·package_sudo_installed | 1064 | ··-·package_sudo_installed |
| 1060 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1061 | [[packages]] | ||
| 1062 | name·=·"sudo" | ||
| 1063 | version·=·"*" | ||
| 1064 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1065 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1065 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1066 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1066 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1067 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1067 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1068 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1068 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1069 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1069 | include·install_sudo | 1070 | include·install_sudo |
| Offset 9330, 14 lines modified | Offset 9330, 19 lines modified | ||
| 9330 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9330 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9331 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9331 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9332 | ·····················00232 | 9332 | ·····················00232 |
| 9333 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9333 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9334 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9334 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9335 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9335 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9336 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9336 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9338 | [[packages]] | ||
| 9339 | name·=·"pam_apparmor" | ||
| 9340 | version·=·"*" | ||
| 9337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9342 | #·Remediation·is·applicable·only·in·certain·platforms | 9346 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9343 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9347 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9369, 19 lines modified | Offset 9374, 14 lines modified | ||
| 9369 | ··-·NIST-800-53-SC-7(21) | 9374 | ··-·NIST-800-53-SC-7(21) |
| 9370 | ··-·enable_strategy | 9375 | ··-·enable_strategy |
| 9371 | ··-·low_complexity | 9376 | ··-·low_complexity |
| 9372 | ··-·low_disruption | 9377 | ··-·low_disruption |
| 9373 | ··-·medium_severity | 9378 | ··-·medium_severity |
| 9374 | ··-·no_reboot_needed | 9379 | ··-·no_reboot_needed |
| 9375 | ··-·package_pam_apparmor_installed | 9380 | ··-·package_pam_apparmor_installed |
| 9376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9377 | [[packages]] | ||
| 9378 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 57752/63231 bytes (91.33%) of diff not shown. | |||
| Offset 14324, 16 lines modified | Offset 14324, 16 lines modified | ||
| 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fa0:·2028·6173·206f·6620·3230·323 | 00037fa0:·2028·6173·206f·6620·3230·3236·2d30·312d···(as·of·2026-01- | ||
| 00037fb0:·323 | 00037fb0:·3238·290a·2020·2020·2020·2020·2020·2020··28).············ | ||
| 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 21888, 283 lines modified | Offset 21888, 283 lines modified | ||
| 000557f0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 000557f0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 00055800:·3338·3822·2074·6162·696e·6465·783d·2230··388"·tabindex="0 | 00055800:·3338·3822·2074·6162·696e·6465·783d·2230··388"·tabindex="0 | ||
| 00055810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00055810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00055820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00055820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00055830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00055830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00055840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00055840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00055850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00055850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00055860:·6961·7469·6f6e·2053· | 00055860:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00055870:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00055880:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00055890:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000558a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000558b0:·2069·643d·2269·646d·3131·3338·3822·3e3c···id="idm11388">< | |||
| 000558c0:·7072·653e·3c63·6f64·653e·0a5b·6375·7374··pre><code>.[cust | |||
| 000558d0:·6f6d·697a·6174·696f·6e73·2e73·6572·7669··omizations.servi | |||
| 000558e0:·6365·735d·0a6d·6173·6b65·6420·3d20·5b22··ces].masked·=·[" | |||
| 00055870:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00055880:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00055890:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000558a0:·7365·2220·6964·3d22·6964·6d31·3133·3838··se"·id="idm11388 | |||
| 000558b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 000558c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000558d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000558e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 000558f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00055900:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00055910:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00055920:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00055930:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00055940:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00055950:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00055960:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00055970:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00055980:·7468·3e3c·7464·3e64·6973·6162·6c65·3c2f··th><td>disable</ | |||
| 00055990:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000559a0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 000559b0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 000559c0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 000559d0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 000559e0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 000559f0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 00055a00:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 00055a10:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 00055a20:·2074·6865·6e0a·0a53·5953·5445·4d43·544c···then..SYSTEMCTL | |||
| 00055a30:·5f45·5845·433d·272f·7573·722f·6269·6e2f··_EXEC='/usr/bin/ | |||
| 00055a40:·7379·7374·656d·6374·6c27·0a22·2453·5953··systemctl'."$SYS | |||
| 00055a50:·5445·4d43·544c·5f45·5845·4322·2073·746f··TEMCTL_EXEC"·sto | |||
| 00055a60:·7020·2764·6562·7567·2d73·6865·6c6c·2e73··p·'debug-shell.s | |||
| 00055a70:·6572·7669·6365·270a·2224·5359·5354·454d··ervice'."$SYSTEM | |||
| 00055a80:·4354·4c5f·4558·4543·2220·6469·7361·626c··CTL_EXEC"·disabl | |||
| 00055a90:·6520·2764·6562·7567·2d73·6865·6c6c·2e73··e·'debug-shell.s | |||
| 00055aa0:·6572·7669·6365·270a·2224·5359·5354·454d··ervice'."$SYSTEM | |||
| 00055ab0:·4354·4c5f·4558·4543·2220·6d61·736b·2027··CTL_EXEC"·mask·' | |||
| 00055 | 000558f0:·6465·6275·672d·7368·656c·6c22·5d0a·3c2f··debug-shell"].</ | ||
| 00055ad0:·6963·6527·0a23·2044·6973·6162·6c65·2073··ice'.#·Disable·s | |||
| 00055ae0:·6f63·6b65·7420·6163·7469·7661·7469·6f6e··ocket·activation | |||
| 00055af0:·2069·6620·7765·2068·6176·6520·6120·756e···if·we·have·a·un | |||
| 00055 | 00055900:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 00055910:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00055920:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00055930:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00055940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00055950:·2369·646d·3131·3338·3922·2074·6162·696e··#idm11389"·tabin | |||
| 00055960:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00055970:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00055980:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00055990:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 000559a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 000559b0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 000559c0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 000559d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000559e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000559f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00055a00:·6d31·3133·3839·223e·3c74·6162·6c65·2063··m11389"><table·c | |||
| 00055a10:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00055a20:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00055a30:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00055a40:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00055a50:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00055a60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00055a70:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00055a80:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00055a90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00055aa0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00055ab0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00055ac0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00055ad0:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | |||
| 00055ae0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00055af0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00055b00:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 00055b10:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 00055b20:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 00055b30:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 00055b40:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 00055b50:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 00055b60:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 00055b70:·656e·7620·5d3b·2074·6865·6e0a·0a53·5953··env·];·then..SYS | |||
| 00055b80:·5445·4d43·544c·5f45·5845·433d·272f·7573··TEMCTL_EXEC='/us | |||
| 00055b90:·722f·6269·6e2f·7379·7374·656d·6374·6c27··r/bin/systemctl' | |||
| 00055ba0:·0a22·2453·5953·5445·4d43·544c·5f45·5845··."$SYSTEMCTL_EXE | |||
| 00055bb0:·4322·2073·746f·7020·2764·6562·7567·2d73··C"·stop·'debug-s | |||
| 00055bc0:·6865·6c6c·2e73·6572·7669·6365·270a·2224··hell.service'."$ | |||
| 00055b | 00055bd0:·5359·5354·454d·4354·4c5f·4558·4543·2220··SYSTEMCTL_EXEC"· | ||
| 00055be0:·6469·7361·626c·6520·2764·6562·7567·2d73··disable·'debug-s | |||
| 00055bf0:·6865·6c6c·2e73·6572·7669·6365·270a·2224··hell.service'."$ | |||
| 00055b20:·4543·2220·2d71·206c·6973·742d·756e·6974··EC"·-q·list-unit | |||
| 00055b30:·2d66·696c·6573·2064·6562·7567·2d73·6865··-files·debug-she | |||
| 00055b40:·6c6c·2e73·6f63·6b65·743b·2074·6865·6e0a··ll.socket;·then. | |||
| 00055b50:·2020·2020·2224·5359·5354·454d·4354·4c5f······"$SYSTEMCTL_ | |||
| 00055b60:·4558·4543·2220·7374·6f70·2027·6465·6275··EXEC"·stop·'debu | |||
| Max diff block lines reached; 444732/483702 bytes (91.94%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1638, 14 lines modified | Offset 1638, 18 lines modified | ||
| 1638 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1638 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1639 | ····················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a) | 1639 | ····················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a) |
| 1640 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1), | 1640 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1), |
| 1641 | ····················164.310(d)(2)(iii) | 1641 | ····················164.310(d)(2)(iii) |
| 1642 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1642 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1643 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1643 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1644 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1644 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1646 | [customizations.services] | ||
| 1647 | masked·=·["debug-shell"] | ||
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1646 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1649 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1647 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1650 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1648 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1651 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1649 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1652 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1650 | #·Remediation·is·applicable·only·in·certain·platforms | 1653 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1651 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1654 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1744, 18 lines modified | Offset 1748, 14 lines modified | ||
| 1744 | ··-·NIST-800-53-CM-6 | 1748 | ··-·NIST-800-53-CM-6 |
| 1745 | ··-·disable_strategy | 1749 | ··-·disable_strategy |
| 1746 | ··-·low_complexity | 1750 | ··-·low_complexity |
| 1747 | ··-·low_disruption | 1751 | ··-·low_disruption |
| 1748 | ··-·medium_severity | 1752 | ··-·medium_severity |
| 1749 | ··-·no_reboot_needed | 1753 | ··-·no_reboot_needed |
| 1750 | ··-·service_debug-shell_disabled | 1754 | ··-·service_debug-shell_disabled |
| 1751 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1752 | [customizations.services] | ||
| 1753 | masked·=·["debug-shell"] | ||
| 1754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1755 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1755 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1756 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1756 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1757 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1757 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1758 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1758 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1759 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1759 | include·disable_debug-shell | 1760 | include·disable_debug-shell |
| Offset 3213, 14 lines modified | Offset 3213, 18 lines modified | ||
| 3213 | ····························A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 3213 | ····························A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 3214 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 3214 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 3215 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 3215 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 3216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 3216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 3217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010240 | 3217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010240 |
| 3218 | ·············_\x8c_\x8i_\x8s············1.1.23 | 3218 | ·············_\x8c_\x8i_\x8s············1.1.23 |
| 3219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234823r854187_rule | 3219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234823r854187_rule |
| 3220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3221 | [customizations.services] | ||
| 3222 | masked·=·["autofs"] | ||
| 3220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3225 | #·Remediation·is·applicable·only·in·certain·platforms | 3228 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3226 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·autofs·);·then | 3229 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·autofs·);·then |
| Offset 3356, 18 lines modified | Offset 3360, 14 lines modified | ||
| 3356 | ··-·NIST-800-53-MP-7 | 3360 | ··-·NIST-800-53-MP-7 |
| 3357 | ··-·disable_strategy | 3361 | ··-·disable_strategy |
| 3358 | ··-·low_complexity | 3362 | ··-·low_complexity |
| 3359 | ··-·low_disruption | 3363 | ··-·low_disruption |
| 3360 | ··-·medium_severity | 3364 | ··-·medium_severity |
| 3361 | ··-·no_reboot_needed | 3365 | ··-·no_reboot_needed |
| 3362 | ··-·service_autofs_disabled | 3366 | ··-·service_autofs_disabled |
| 3363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3364 | [customizations.services] | ||
| 3365 | masked·=·["autofs"] | ||
| 3366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3371 | include·disable_autofs | 3372 | include·disable_autofs |
| Offset 5135, 14 lines modified | Offset 5135, 18 lines modified | ||
| 5135 | ····························A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 5135 | ····························A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 5136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 5136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 5137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 5137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 5138 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1.1 | 5138 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1.1 |
| 5139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000269-GPOS-00103,·SRG-OS-000480-GPOS-00227 | 5139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000269-GPOS-00103,·SRG-OS-000480-GPOS-00227 |
| 5140 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-040190 | 5140 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-040190 |
| 5141 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-235003r622137_rule | 5141 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-235003r622137_rule |
| 5142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5143 | [customizations.services] | ||
| 5144 | masked·=·["kdump"] | ||
| 5142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 5145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 5143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 5149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 5147 | #·Remediation·is·applicable·only·in·certain·platforms | 5150 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 5151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 5249, 18 lines modified | Offset 5253, 14 lines modified | ||
| 5249 | ··-·NIST-800-53-CM-7(b) | 5253 | ··-·NIST-800-53-CM-7(b) |
| 5250 | ··-·disable_strategy | 5254 | ··-·disable_strategy |
| 5251 | ··-·low_complexity | 5255 | ··-·low_complexity |
| 5252 | ··-·low_disruption | 5256 | ··-·low_disruption |
| 5253 | ··-·medium_severity | 5257 | ··-·medium_severity |
| 5254 | ··-·no_reboot_needed | 5258 | ··-·no_reboot_needed |
| 5255 | ··-·service_kdump_disabled | 5259 | ··-·service_kdump_disabled |
| 5256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5257 | [customizations.services] | ||
| 5258 | masked·=·["kdump"] | ||
| 5259 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5260 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5261 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5262 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5263 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 18778/24920 bytes (75.35%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3236·2d30·312d·3238·290a···of·2026-01-28). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16959, 130 lines modified | Offset 16959, 130 lines modified | ||
| 000423e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000423e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000423f0:·2369·646d·3633·3332·2220·7461·6269·6e64··#idm6332"·tabind | 000423f0:·2369·646d·3633·3332·2220·7461·6269·6e64··#idm6332"·tabind | ||
| 00042400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00042400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00042410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00042410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00042420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00042420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00042430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00042430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00042440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00042440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00042450:·5265·6d65·6469·6174·696f·6e20· | 00042450:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00042460:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 00042470:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00042480:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00042490:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000424a0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 00042460:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00042470:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00042480:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00042490:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000424a0:·3633·3332·223e·3c74·6162·6c65·2063·6c61··6332"><table·cla | |||
| 000424b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000424c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000424d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000424e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000424f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00042500:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00042510:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00042520:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00042530:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00042540:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00042550:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00042560:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00042570:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00042580:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00042 | 000424b0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | ||
| 000424c0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000424d0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 000424e0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 000425a0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 000425b0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 000425c0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 000425d0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 000425e0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 000425f0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 00042600:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 00042610:·205d·3b20·7468·656e·0a0a·7a79·7070·6572···];·then..zypper | |||
| 00042620:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 00042630:·6522·0a0a·656c·7365·0a20·2020·2026·6774··e"..else.····> | |||
| 00042640:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 00042650:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 00042660:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 00042670:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 00042680:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 00042690:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000426a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 000426b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 000426c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 000426d0:·6574·3d22·2369·646d·3633·3333·2220·7461··et="#idm6333"·ta | |||
| 000426e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000426f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00042700:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00042710:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00042720:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00042730:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00042740:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00042750:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00042760:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00042770:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00042780:·6964·3d22·6964·6d36·3333·3322·3e3c·7461··id="idm6333"><ta | |||
| 00042790:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000427a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000427b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 000427c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 000427d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 000427e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 000427f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00042800:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00042810:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00042820:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00042830:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00042840:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00042850:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00042860:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00042870:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00042880:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00042890:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 000428a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 000428b0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 000428c0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 000428d0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 000428e0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 000428f0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 00042900:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 00042910:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 00042920:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 00042930:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00042940:·2d38·3332·3839·2d39·0a20·202d·2043·4a49··-83289-9.··-·CJI | |||
| 00042950:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 00042960:·4953·412d·5354·4947·2d53·4c45·532d·3135··ISA-STIG-SLES-15 | |||
| 00042970:·2d30·3130·3431·390a·2020·2d20·4e49·5354··-010419.··-·NIST | |||
| 00042980:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 00042990:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 000429a0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 000429b0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 000429c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 000429d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 000429e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 000429f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 00042a00:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 00042a10:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 00042a20:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 00042a30:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00042 | 000424f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| Max diff block lines reached; 456416/474134 bytes (96.26%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 525, 14 lines modified | Offset 525, 19 lines modified | ||
| 525 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 525 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 527 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 527 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 528 | ·············_\x8c_\x8i_\x8s············1.4.1 | 528 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 529 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 529 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 530 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 530 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 533 | [[packages]] | ||
| 534 | name·=·"aide" | ||
| 535 | version·=·"*" | ||
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 533 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 534 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 535 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 536 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 537 | #·Remediation·is·applicable·only·in·certain·platforms | 541 | #·Remediation·is·applicable·only·in·certain·platforms |
| 538 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 542 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 561, 19 lines modified | Offset 566, 14 lines modified | ||
| 561 | ··-·PCI-DSSv4-11.5.2 | 566 | ··-·PCI-DSSv4-11.5.2 |
| 562 | ··-·enable_strategy | 567 | ··-·enable_strategy |
| 563 | ··-·low_complexity | 568 | ··-·low_complexity |
| 564 | ··-·low_disruption | 569 | ··-·low_disruption |
| 565 | ··-·medium_severity | 570 | ··-·medium_severity |
| 566 | ··-·no_reboot_needed | 571 | ··-·no_reboot_needed |
| 567 | ··-·package_aide_installed | 572 | ··-·package_aide_installed |
| 568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 569 | [[packages]] | ||
| 570 | name·=·"aide" | ||
| 571 | version·=·"*" | ||
| 572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 573 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 574 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 575 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 576 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 577 | include·install_aide | 578 | include·install_aide |
| Offset 2298, 14 lines modified | Offset 2298, 19 lines modified | ||
| 2298 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2298 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2299 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2299 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2300 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2300 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2301 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2301 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2302 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 2302 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 2303 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2303 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2306 | [[packages]] | ||
| 2307 | name·=·"sudo" | ||
| 2308 | version·=·"*" | ||
| 2305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2310 | #·Remediation·is·applicable·only·in·certain·platforms | 2314 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2311 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2315 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2331, 19 lines modified | Offset 2336, 14 lines modified | ||
| 2331 | ··-·PCI-DSSv4-2.2.6 | 2336 | ··-·PCI-DSSv4-2.2.6 |
| 2332 | ··-·enable_strategy | 2337 | ··-·enable_strategy |
| 2333 | ··-·low_complexity | 2338 | ··-·low_complexity |
| 2334 | ··-·low_disruption | 2339 | ··-·low_disruption |
| 2335 | ··-·medium_severity | 2340 | ··-·medium_severity |
| 2336 | ··-·no_reboot_needed | 2341 | ··-·no_reboot_needed |
| 2337 | ··-·package_sudo_installed | 2342 | ··-·package_sudo_installed |
| 2338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2339 | [[packages]] | ||
| 2340 | name·=·"sudo" | ||
| 2341 | version·=·"*" | ||
| 2342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2347 | include·install_sudo | 2348 | include·install_sudo |
| Offset 11768, 14 lines modified | Offset 11768, 19 lines modified | ||
| 11768 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 11768 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 11769 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 11769 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 11770 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 11770 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 11771 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 11771 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 11772 | ·············_\x8c_\x8i_\x8s············4.2.4 | 11772 | ·············_\x8c_\x8i_\x8s············4.2.4 |
| 11773 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 11773 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 11774 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 11774 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 11775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11776 | [[packages]] | ||
| 11777 | name·=·"logrotate" | ||
| 11778 | version·=·"*" | ||
| 11775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 11779 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 11776 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 11780 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 11777 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 11781 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 11778 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 11782 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 11779 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 11783 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 11780 | #·Remediation·is·applicable·only·in·certain·platforms | 11784 | #·Remediation·is·applicable·only·in·certain·platforms |
| 11781 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 11785 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 11802, 19 lines modified | Offset 11807, 14 lines modified | ||
| 11802 | ··-·PCI-DSSv4-10.5.1 | 11807 | ··-·PCI-DSSv4-10.5.1 |
| 11803 | ··-·enable_strategy | 11808 | ··-·enable_strategy |
| 11804 | ··-·low_complexity | 11809 | ··-·low_complexity |
| 11805 | ··-·low_disruption | 11810 | ··-·low_disruption |
| 11806 | ··-·medium_severity | 11811 | ··-·medium_severity |
| 11807 | ··-·no_reboot_needed | 11812 | ··-·no_reboot_needed |
| 11808 | ··-·package_logrotate_installed | 11813 | ··-·package_logrotate_installed |
| 11809 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11810 | [[packages]] | ||
| 11811 | name·=·"logrotate" | ||
| Max diff block lines reached; 22974/28465 bytes (80.71%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037f00:·323 | 00037f00:·3236·2d30·312d·3238·290a·2020·2020·2020··26-01-28).······ | ||
| 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15096, 130 lines modified | Offset 15096, 130 lines modified | ||
| 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | ||
| 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003aff0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b000:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b010:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b020:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b030:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003aff0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b000:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b010:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b020:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b030:·6964·6d36·3333·3222·3e3c·7461·626c·6520··idm6332"><table· | |||
| 0003b040:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b050:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b060:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b070:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b080:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b090:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b0a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b0b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b0c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b0d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b0e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b0f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b100:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b110:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b | 0003b040:·3633·3332·223e·3c70·7265·3e3c·636f·6465··6332"><pre><code | ||
| 0003b050:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b060:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b070:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b130:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b140:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b150:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b160:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b170:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003b180:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003b190:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003b1a0:·656e·7620·5d3b·2074·6865·6e0a·0a7a·7970··env·];·then..zyp | |||
| 0003b1b0:·7065·7220·696e·7374·616c·6c20·2d79·2022··per·install·-y·" | |||
| 0003b1c0:·6169·6465·220a·0a65·6c73·650a·2020·2020··aide"..else.···· | |||
| 0003b1d0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b1e0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b1f0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b200:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b210:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b220:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b230:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b240:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b250:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b260:·6172·6765·743d·2223·6964·6d36·3333·3322··arget="#idm6333" | |||
| 0003b270:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b280:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b290:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2d0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b2e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b2f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b300:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b310:·6522·2069·643d·2269·646d·3633·3333·223e··e"·id="idm6333"> | |||
| 0003b320:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b330:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b340:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b350:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b360:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b370:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b380:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b390:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b3a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b3b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b3c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b3d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b3e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b3f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b400:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b410:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b420:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b430:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b440:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b450:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b460:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b470:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b480:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b490:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b4a0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b4b0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b4c0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b4d0:·4343·452d·3833·3238·392d·390a·2020·2d20··CCE-83289-9.··-· | |||
| 0003b4e0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b4f0:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b500:·2d31·352d·3031·3034·3139·0a20·202d·204e··-15-010419.··-·N | |||
| 0003b510:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b520:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b530:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b540:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b550:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b560:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b570:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b580:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b590:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b5a0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b5b0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b5c0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b | 0003b080:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| Max diff block lines reached; 85152/102870 bytes (82.78%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ··············(SLES)·for·SAP·Applications·15 | 42 | ··············(SLES)·for·SAP·Applications·15 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 116 | ·············_\x8c_\x8i_\x8s············1.4.1 | 116 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 126 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 149, 19 lines modified | Offset 154, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | include·install_aide | 166 | include·install_aide |
| Offset 8764, 14 lines modified | Offset 8764, 19 lines modified | ||
| 8764 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 8764 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 8765 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 8765 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 8766 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 8766 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 8767 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 8767 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 8768 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 8768 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 8769 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 8769 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 8770 | ·············_\x8c_\x8i_\x8s············4.2.1.1 | 8770 | ·············_\x8c_\x8i_\x8s············4.2.1.1 |
| 8771 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8772 | [[packages]] | ||
| 8773 | name·=·"rsyslog" | ||
| 8774 | version·=·"*" | ||
| 8771 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8772 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8776 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8773 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8777 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8774 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8778 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8775 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8779 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8776 | #·Remediation·is·applicable·only·in·certain·platforms | 8780 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8777 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 8781 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8796, 19 lines modified | Offset 8801, 14 lines modified | ||
| 8796 | ··-·NIST-800-53-CM-6(a) | 8801 | ··-·NIST-800-53-CM-6(a) |
| 8797 | ··-·enable_strategy | 8802 | ··-·enable_strategy |
| 8798 | ··-·low_complexity | 8803 | ··-·low_complexity |
| 8799 | ··-·low_disruption | 8804 | ··-·low_disruption |
| 8800 | ··-·medium_severity | 8805 | ··-·medium_severity |
| 8801 | ··-·no_reboot_needed | 8806 | ··-·no_reboot_needed |
| 8802 | ··-·package_rsyslog_installed | 8807 | ··-·package_rsyslog_installed |
| 8803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8804 | [[packages]] | ||
| 8805 | name·=·"rsyslog" | ||
| 8806 | version·=·"*" | ||
| 8807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8808 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8809 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8809 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8810 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8810 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8811 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8811 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8812 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8812 | include·install_rsyslog | 8813 | include·install_rsyslog |
| Offset 8848, 14 lines modified | Offset 8848, 19 lines modified | ||
| 8848 | Severity: ···medium | 8848 | Severity: ···medium |
| 8849 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_iptables_installed | 8849 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_iptables_installed |
| 8850 | Identifiers:·CCE-91244-4 | 8850 | Identifiers:·CCE-91244-4 |
| 8851 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8851 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8852 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-1.4.1 | 8852 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-1.4.1 |
| 8853 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 8853 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 8854 | ·············_\x8c_\x8i_\x8s····3.5.3.1.1 | 8854 | ·············_\x8c_\x8i_\x8s····3.5.3.1.1 |
| 8855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8856 | [[packages]] | ||
| 8857 | name·=·"iptables" | ||
| 8858 | version·=·"*" | ||
| 8855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8856 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8857 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8858 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8859 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8860 | #·Remediation·is·applicable·only·in·certain·platforms | 8864 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8861 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·);·then | 8865 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·);·then |
| Offset 8882, 19 lines modified | Offset 8887, 14 lines modified | ||
| 8882 | ··-·PCI-DSS-Req-1.4.1 | 8887 | ··-·PCI-DSS-Req-1.4.1 |
| 8883 | ··-·enable_strategy | 8888 | ··-·enable_strategy |
| 8884 | ··-·low_complexity | 8889 | ··-·low_complexity |
| 8885 | ··-·low_disruption | 8890 | ··-·low_disruption |
| 8886 | ··-·medium_severity | 8891 | ··-·medium_severity |
| 8887 | ··-·no_reboot_needed | 8892 | ··-·no_reboot_needed |
| 8888 | ··-·package_iptables_installed | 8893 | ··-·package_iptables_installed |
| 8889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8890 | [[packages]] | ||
| 8891 | name·=·"iptables" | ||
| Max diff block lines reached; 4776/10355 bytes (46.12%) of diff not shown. | |||
| Offset 14300, 16 lines modified | Offset 14300, 16 lines modified | ||
| 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e20:·2020·2020·2028·6173·206f·6620·3230·3236·······(as·of·2026 | ||
| 00037e30:·2d3 | 00037e30:·2d30·312d·3238·290a·2020·2020·2020·2020··-01-28).········ | ||
| 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e90:·3230·323 | 00037e90:·3230·3236·2d30·312d·3238·290a·2020·2020··2026-01-28).···· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 27247, 125 lines modified | Offset 27247, 125 lines modified | ||
| 0006a6e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0006a6e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0006a6f0:·2369·646d·3137·3335·3322·2074·6162·696e··#idm17353"·tabin | 0006a6f0:·2369·646d·3137·3335·3322·2074·6162·696e··#idm17353"·tabin | ||
| 0006a700:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0006a700:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0006a710:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0006a710:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0006a720:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0006a720:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0006a730:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0006a730:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0006a740:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0006a740:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0006a750:·3e52·656d·6564·6961·7469·6f6e·20 | 0006a750:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0006a760:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0006a770:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0006a780:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0006a790:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0006a7a0:·6c61·7073·6522·2069·643d·2269·646d·3137··lapse"·id="idm17 | |||
| 0006a760:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0006a770:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0006a780:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0006a790:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0006a7a0:·6d31·3733·3533·223e·3c74·6162·6c65·2063··m17353"><table·c | |||
| 0006a7b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0006a7c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0006a7d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0006a7e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0006a7f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0006a800:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0006a810:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0006a820:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0006a830:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0006a840:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0006a850:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0006a860:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0006a870:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0006a880:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0006a | 0006a7b0:·3335·3322·3e3c·7072·653e·3c63·6f64·653e··353"><pre><code> | ||
| 0006a7c0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0006a7d0:·6d65·203d·2022·7273·7973·6c6f·6722·0a76··me·=·"rsyslog".v | |||
| 0006a7e0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0006a7f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0006a800:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0006a810:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0006a820:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0006a830:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0006a840:·6964·6d31·3733·3534·2220·7461·6269·6e64··idm17354"·tabind | |||
| 0006a850:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0006a860:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0006a870:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0006a880:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0006a890:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0006a8a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0006a8b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0006a8c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0006a8d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0006a8e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0006a8f0:·3137·3335·3422·3e3c·7461·626c·6520·636c··17354"><table·cl | |||
| 0006a900:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0006a910:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0006a920:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0006a930:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0006a940:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0006a950:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0006a960:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0006a970:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0006a980:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0006a990:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0006a9a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0006a9b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0006a9c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0006a9d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0006a9e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0006a9f0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0006aa00:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0006aa10:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0006aa20:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0006aa30:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0006aa40:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0006aa50:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0006aa60:·7620·5d3b·2074·6865·6e0a·0a7a·7970·7065··v·];·then..zyppe | |||
| 0006aa70:·7220·696e·7374·616c·6c20·2d79·2022·7273··r·install·-y·"rs | |||
| 0006aa80:·7973·6c6f·6722·0a0a·656c·7365·0a20·2020··yslog"..else.··· | |||
| 0006aa90:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0006a | 0006aaa0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | ||
| 0006a | 0006aab0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | ||
| 0006a8c0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0006a8d0:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0006a8e0:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0006a8f0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0006a900:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0006a910:·6e76·205d·3b20·7468·656e·0a0a·7a79·7070··nv·];·then..zypp | |||
| 0006a920:·6572·2069·6e73·7461·6c6c·202d·7920·2272··er·install·-y·"r | |||
| 0006a930:·7379·736c·6f67·220a·0a65·6c73·650a·2020··syslog"..else.·· | |||
| 0006a940:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0006a950:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0006a960:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0006a970:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0006a980:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0006a990:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0006a9a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0006a | 0006aac0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | ||
| 0006aad0:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0006aae0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0006aaf0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0006ab00:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0006ab10:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0006ab20:·7461·7267·6574·3d22·2369·646d·3137·3335··target="#idm1735 | |||
| 0006ab30:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0006ab40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0006ab50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0006ab60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0006ab70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0006ab80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0006ab90:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0006aba0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| Max diff block lines reached; 235464/252492 bytes (93.26%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 3160, 14 lines modified | Offset 3160, 19 lines modified | ||
| 3160 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3160 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3161 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3161 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3162 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3162 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3163 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 3163 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 3164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 3164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 3165 | ····························00227 | 3165 | ····························00227 |
| 3166 | ·············_\x8c_\x8i_\x8s············4.2.1.1 | 3166 | ·············_\x8c_\x8i_\x8s············4.2.1.1 |
| 3167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3168 | [[packages]] | ||
| 3169 | name·=·"rsyslog" | ||
| 3170 | version·=·"*" | ||
| 3167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3172 | #·Remediation·is·applicable·only·in·certain·platforms | 3176 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3192, 19 lines modified | Offset 3197, 14 lines modified | ||
| 3192 | ··-·NIST-800-53-CM-6(a) | 3197 | ··-·NIST-800-53-CM-6(a) |
| 3193 | ··-·enable_strategy | 3198 | ··-·enable_strategy |
| 3194 | ··-·low_complexity | 3199 | ··-·low_complexity |
| 3195 | ··-·low_disruption | 3200 | ··-·low_disruption |
| 3196 | ··-·medium_severity | 3201 | ··-·medium_severity |
| 3197 | ··-·no_reboot_needed | 3202 | ··-·no_reboot_needed |
| 3198 | ··-·package_rsyslog_installed | 3203 | ··-·package_rsyslog_installed |
| 3199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3200 | [[packages]] | ||
| 3201 | name·=·"rsyslog" | ||
| 3202 | version·=·"*" | ||
| 3203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3208 | include·install_rsyslog | 3209 | include·install_rsyslog |
| Offset 3232, 14 lines modified | Offset 3232, 18 lines modified | ||
| 3232 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 3232 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 3233 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 3233 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 3234 | ····························A.15.2.1,·A.15.2.2,·A.17.2.1 | 3234 | ····························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 3235 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 3235 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 3236 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 3236 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 3237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 3237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 3238 | ·············_\x8c_\x8i_\x8s············4.2.1.2 | 3238 | ·············_\x8c_\x8i_\x8s············4.2.1.2 |
| 3239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3240 | [customizations.services] | ||
| 3241 | enabled·=·["rsyslog"] | ||
| 3239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3244 | #·Remediation·is·applicable·only·in·certain·platforms | 3247 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3245 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3248 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3279, 18 lines modified | Offset 3283, 14 lines modified | ||
| 3279 | ··-·NIST-800-53-CM-6(a) | 3283 | ··-·NIST-800-53-CM-6(a) |
| 3280 | ··-·enable_strategy | 3284 | ··-·enable_strategy |
| 3281 | ··-·low_complexity | 3285 | ··-·low_complexity |
| 3282 | ··-·low_disruption | 3286 | ··-·low_disruption |
| 3283 | ··-·medium_severity | 3287 | ··-·medium_severity |
| 3284 | ··-·no_reboot_needed | 3288 | ··-·no_reboot_needed |
| 3285 | ··-·service_rsyslog_enabled | 3289 | ··-·service_rsyslog_enabled |
| 3286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3287 | [customizations.services] | ||
| 3288 | enabled·=·["rsyslog"] | ||
| 3289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3294 | include·enable_rsyslog | 3295 | include·enable_rsyslog |
| Offset 3410, 14 lines modified | Offset 3410, 19 lines modified | ||
| 3410 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 3410 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 3411 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 3411 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 3412 | References:··········SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 3412 | References:··········SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 3413 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010220 | 3413 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010220 |
| 3414 | ·············_\x8c_\x8i_\x8s·····3.5.1.1 | 3414 | ·············_\x8c_\x8i_\x8s·····3.5.1.1 |
| 3415 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 3415 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 3416 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234821r854186_rule | 3416 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234821r854186_rule |
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3418 | [[packages]] | ||
| 3419 | name·=·"firewalld" | ||
| 3420 | version·=·"*" | ||
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3422 | #·Remediation·is·applicable·only·in·certain·platforms | 3426 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3423 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3427 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3447, 19 lines modified | Offset 3452, 14 lines modified | ||
| 3447 | ··-·PCI-DSSv4-1.2.1 | 3452 | ··-·PCI-DSSv4-1.2.1 |
| 3448 | ··-·enable_strategy | 3453 | ··-·enable_strategy |
| 3449 | ··-·low_complexity | 3454 | ··-·low_complexity |
| 3450 | ··-·low_disruption | 3455 | ··-·low_disruption |
| 3451 | ··-·medium_severity | 3456 | ··-·medium_severity |
| 3452 | ··-·no_reboot_needed | 3457 | ··-·no_reboot_needed |
| 3453 | ··-·package_firewalld_installed | 3458 | ··-·package_firewalld_installed |
| 3454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3455 | [[packages]] | ||
| 3456 | name·=·"firewalld" | ||
| 3457 | version·=·"*" | ||
| 3458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 14980/20910 bytes (71.64%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 129 lines modified | Offset 15107, 129 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20· | 0003b090:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b0b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0e0:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b0a0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b0e0:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b0f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b100:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b110:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b120:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b130:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b140:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b150:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b160:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b170:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b180:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b190:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b1a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b1b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b1c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b100:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b110:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b120:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b1e0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b1f0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b200:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b210:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003b220:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b230:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b240:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b250:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003b260:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b270:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b280:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b290:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b2a0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b2b0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b2c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b2e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b2f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b310:·3d22·2369·646d·3633·3333·2220·7461·6269··="#idm6333"·tabi | |||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b380:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3c0:·3d22·6964·6d36·3333·3322·3e3c·7461·626c··="idm6333"><tabl | |||
| 0003b3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b3f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b410:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b420:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b430:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b440:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b450:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b470:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b490:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4c0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b4f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b500:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b510:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b520:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b530:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b540:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b550:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b560:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b570:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003b580:·3332·3839·2d39·0a20·202d·2043·4a49·532d··3289-9.··-·CJIS- | |||
| 0003b590:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5a0:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003b5b0:·3130·3431·390a·2020·2d20·4e49·5354·2d38··10419.··-·NIST-8 | |||
| 0003b5c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b5d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b5e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b5f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b600:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b610:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b620:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b630:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b640:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b650:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b660:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b670:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b | 0003b130:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| Max diff block lines reached; 281038/298618 bytes (94.11%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 106, 14 lines modified | Offset 106, 19 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 109 | ·············_\x8c_\x8i_\x8s············1.4.1 | 109 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | #·Remediation·is·applicable·only·in·certain·platforms | 122 | #·Remediation·is·applicable·only·in·certain·platforms |
| 119 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 123 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 142, 19 lines modified | Offset 147, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 149 | ··-·low_complexity |
| 145 | ··-·low_disruption | 150 | ··-·low_disruption |
| 146 | ··-·medium_severity | 151 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | [[packages]] | ||
| 151 | name·=·"aide" | ||
| 152 | version·=·"*" | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | include·install_aide | 159 | include·install_aide |
| Offset 10007, 14 lines modified | Offset 10007, 19 lines modified | ||
| 10007 | Severity: ···medium | 10007 | Severity: ···medium |
| 10008 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed | 10008 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed |
| 10009 | Identifiers:·CCE-83268-3 | 10009 | Identifiers:·CCE-83268-3 |
| 10010 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 10010 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 10011 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 10011 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 10012 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010110 | 10012 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010110 |
| 10013 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234811r622137_rule | 10013 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234811r622137_rule |
| 10014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10015 | [[packages]] | ||
| 10016 | name·=·"kbd" | ||
| 10017 | version·=·"*" | ||
| 10014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 10018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 10015 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10019 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10016 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10020 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10017 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10021 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10018 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 10022 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 10019 | #·Remediation·is·applicable·only·in·certain·platforms | 10023 | #·Remediation·is·applicable·only·in·certain·platforms |
| 10020 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 10024 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 10039, 19 lines modified | Offset 10044, 14 lines modified | ||
| 10039 | ··-·DISA-STIG-SLES-15-010110 | 10044 | ··-·DISA-STIG-SLES-15-010110 |
| 10040 | ··-·enable_strategy | 10045 | ··-·enable_strategy |
| 10041 | ··-·low_complexity | 10046 | ··-·low_complexity |
| 10042 | ··-·low_disruption | 10047 | ··-·low_disruption |
| 10043 | ··-·medium_severity | 10048 | ··-·medium_severity |
| 10044 | ··-·no_reboot_needed | 10049 | ··-·no_reboot_needed |
| 10045 | ··-·vlock_installed | 10050 | ··-·vlock_installed |
| 10046 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10047 | [[packages]] | ||
| 10048 | name·=·"kbd" | ||
| 10049 | version·=·"*" | ||
| 10050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10051 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10052 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10053 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10054 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 10055 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 10055 | include·install_kbd | 10056 | include·install_kbd |
| Offset 12820, 14 lines modified | Offset 12820, 19 lines modified | ||
| 12820 | ·············_\x8n_\x8i_\x8s_\x8t····AC-3(4),·AC-6(8),·AC-6(10),·CM-7(5)(b),·CM-7(2),·SC-7(21),·CM-6(a) | 12820 | ·············_\x8n_\x8i_\x8s_\x8t····AC-3(4),·AC-6(8),·AC-6(10),·CM-7(5)(b),·CM-7(2),·SC-7(21),·CM-6(a) |
| 12821 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000312-GPOS-00122,·SRG-OS-000312-GPOS-00123,·SRG-OS-000312-GPOS-00124,·SRG-OS-000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370- | 12821 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000312-GPOS-00122,·SRG-OS-000312-GPOS-00123,·SRG-OS-000312-GPOS-00124,·SRG-OS-000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370- |
| 12822 | References:··········GPOS-00155,·SRG-OS-000480-GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 12822 | References:··········GPOS-00155,·SRG-OS-000480-GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 12823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 12823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 12824 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 12824 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 12825 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 12825 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 12826 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 12826 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 12827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12828 | [[packages]] | ||
| 12829 | name·=·"pam_apparmor" | ||
| 12830 | version·=·"*" | ||
| 12827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 12831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 12828 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 12832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 12829 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 12833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 12830 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 12834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 12831 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 12835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 12832 | #·Remediation·is·applicable·only·in·certain·platforms | 12836 | #·Remediation·is·applicable·only·in·certain·platforms |
| 12833 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 12837 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 12859, 19 lines modified | Offset 12864, 14 lines modified | ||
| 12859 | ··-·NIST-800-53-SC-7(21) | 12864 | ··-·NIST-800-53-SC-7(21) |
| 12860 | ··-·enable_strategy | 12865 | ··-·enable_strategy |
| 12861 | ··-·low_complexity | 12866 | ··-·low_complexity |
| 12862 | ··-·low_disruption | 12867 | ··-·low_disruption |
| 12863 | ··-·medium_severity | 12868 | ··-·medium_severity |
| 12864 | ··-·no_reboot_needed | 12869 | ··-·no_reboot_needed |
| 12865 | ··-·package_pam_apparmor_installed | 12870 | ··-·package_pam_apparmor_installed |
| 12866 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12867 | [[packages]] | ||
| 12868 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 17056/22735 bytes (75.02%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f50:·7320·6f66·2032·3032·3 | 00037f50:·7320·6f66·2032·3032·362d·3031·2d32·3829··s·of·2026-01-28) | ||
| 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 17757, 84 lines modified | Offset 17757, 84 lines modified | ||
| 000455c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000455c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000455d0:·6d36·3836·2220·7461·6269·6e64·6578·3d22··m686"·tabindex=" | 000455d0:·6d36·3836·2220·7461·6269·6e64·6578·3d22··m686"·tabindex=" | ||
| 000455e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000455e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000455f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000455f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00045600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00045600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00045610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00045610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00045620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00045620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00045630:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 00045640:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00045650:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00045660:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00045670:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00045680:·2220·6964·3d22·6964·6d36·3836·223e·3c70··"·id="idm686"><p | |||
| 00045690:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 000456a0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2270··ages]].name·=·"p | |||
| 000456b0:·6f6c·6963·7963·6f72·6575·7469·6c73·2d70··olicycoreutils-p | |||
| 000456c0:·7974·686f·6e2d·7574·696c·7322·0a76·6572··ython-utils".ver | |||
| 000456d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 000456e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 000456f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00045700:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00045710:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00045720:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00045730:·6d36·3837·2220·7461·6269·6e64·6578·3d22··m687"·tabindex=" | |||
| 00045740:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00045750:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00045760:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00045770:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00045780:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00045 | 00045790:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00045 | 000457a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 00045 | 000457b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 00045 | 000457c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 00045 | 000457d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | ||
| 00045 | 000457e0:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | ||
| 00045 | 000457f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 00045 | 00045800:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 00045 | 00045810:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 00045 | 00045820:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 00045 | 00045830:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 00045 | 00045840:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00045 | 00045850:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00045 | 00045860:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 00045 | 00045870:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00045 | 00045880:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00045 | 00045890:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 00045 | 000458a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 00045 | 000458b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 00045 | 000458c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 00045 | 000458d0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 00045 | 000458e0:·6d65·3a20·456e·7375·7265·2070·6f6c·6963··me:·Ensure·polic | ||
| 00045 | 000458f0:·7963·6f72·6575·7469·6c73·2d70·7974·686f··ycoreutils-pytho | ||
| 00045 | 00045900:·6e2d·7574·696c·7320·6973·2069·6e73·7461··n-utils·is·insta | ||
| 00045 | 00045910:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | ||
| 00045 | 00045920:·2020·2020·6e61·6d65·3a20·706f·6c69·6379······name:·policy | ||
| 00045 | 00045930:·636f·7265·7574·696c·732d·7079·7468·6f6e··coreutils-python | ||
| 00045 | 00045940:·2d75·7469·6c73·0a20·2020·2073·7461·7465··-utils.····state | ||
| 00045 | 00045950:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 00045 | 00045960:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | ||
| 00045 | 00045970:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 00045 | 00045980:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 00045 | 00045990:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 00045 | 000459a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 00045 | 000459b0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 00045 | 000459c0:·2020·2d20·4343·452d·3934·3039·312d·360a····-·CCE-94091-6. | ||
| 00045 | 000459d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | ||
| 00045 | 000459e0:·454d·2d30·352d·3635·3432·3230·0a20·202d··EM-05-654220.··- | ||
| 00045 | 000459f0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | ||
| 00045 | 00045a00:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | ||
| 00045 | 00045a10:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | ||
| 00045 | 00045a20:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 00045 | 00045a30:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 00045 | 00045a40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 00045 | 00045a50:·2020·2d20·7061·636b·6167·655f·706f·6c69····-·package_poli | ||
| 00045 | 00045a60:·6379·636f·7265·7574·696c·732d·7079·7468··cycoreutils-pyth | ||
| 00045 | 00045a70:·6f6e·2d75·7469·6c73·5f69·6e73·7461·6c6c··on-utils_install | ||
| 00045 | 00045a80:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | ||
| 00045930:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00045940:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00045950:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00045960:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00045970:·6765·743d·2223·6964·6d36·3837·2220·7461··get="#idm687"·ta | |||
| 00045980:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00045990:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000459a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000459b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000459c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000459d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 000459e0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000459f0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 00045a00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00045a10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00045a20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00045a30:·6d36·3837·223e·3c70·7265·3e3c·636f·6465··m687"><pre><code | |||
| 00045a40:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 00045a50:·616d·6520·3d20·2270·6f6c·6963·7963·6f72··ame·=·"policycor | |||
| 00045a60:·6575·7469·6c73·2d70·7974·686f·6e2d·7574··eutils-python-ut | |||
| 00045a70:·696c·7322·0a76·6572·7369·6f6e·203d·2022··ils".version·=·" | |||
| 00045a80:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 00045a90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | 00045a90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 00045aa0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | 00045aa0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 00045ab0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | 00045ab0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 00045ac0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | 00045ac0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 00045ad0:·6765·743d·2223·6964·6d36·3838·2220·7461··get="#idm688"·ta | 00045ad0:·6765·743d·2223·6964·6d36·3838·2220·7461··get="#idm688"·ta | ||
| 00045ae0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00045ae0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00045af0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00045af0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| Offset 18106, 80 lines modified | Offset 18106, 80 lines modified | ||
| 00046b90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 00046b90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 00046ba0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | 00046ba0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | ||
| 00046bb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00046bb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00046bc0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00046bc0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| Max diff block lines reached; 20381/32534 bytes (62.65%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:sle-microos:5.2 | 41 | ····*·cpe:/o:suse:sle-microos:5.2 |
| 42 | ····*·cpe:/o:suse:sle-micro:5.3 | 42 | ····*·cpe:/o:suse:sle-micro:5.3 |
| 43 | ····*·cpe:/o:suse:sle-micro:5.4 | 43 | ····*·cpe:/o:suse:sle-micro:5.4 |
| 44 | ····*·cpe:/o:suse:sle-micro:5.5 | 44 | ····*·cpe:/o:suse:sle-micro:5.5 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 749, 14 lines modified | Offset 749, 19 lines modified | ||
| 749 | ·············sandbox. | 749 | ·············sandbox. |
| 750 | Severity: ···medium | 750 | Severity: ···medium |
| 751 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils-python-utils_installed | 751 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils-python-utils_installed |
| 752 | Identifiers:·CCE-94091-6 | 752 | Identifiers:·CCE-94091-6 |
| 753 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 753 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 754 | References:··_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-654220 | 754 | References:··_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-654220 |
| 755 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261467r996808_rule | 755 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261467r996808_rule |
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 757 | [[packages]] | ||
| 758 | name·=·"policycoreutils-python-utils" | ||
| 759 | version·=·"*" | ||
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 757 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 758 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 759 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 760 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 761 | -·name:·Ensure·policycoreutils-python-utils·is·installed | 765 | -·name:·Ensure·policycoreutils-python-utils·is·installed |
| 762 | ··package: | 766 | ··package: |
| Offset 768, 19 lines modified | Offset 773, 14 lines modified | ||
| 768 | ··-·DISA-STIG-SLEM-05-654220 | 773 | ··-·DISA-STIG-SLEM-05-654220 |
| 769 | ··-·enable_strategy | 774 | ··-·enable_strategy |
| 770 | ··-·low_complexity | 775 | ··-·low_complexity |
| 771 | ··-·low_disruption | 776 | ··-·low_disruption |
| 772 | ··-·medium_severity | 777 | ··-·medium_severity |
| 773 | ··-·no_reboot_needed | 778 | ··-·no_reboot_needed |
| 774 | ··-·package_policycoreutils-python-utils_installed | 779 | ··-·package_policycoreutils-python-utils_installed |
| 775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 776 | [[packages]] | ||
| 777 | name·=·"policycoreutils-python-utils" | ||
| 778 | version·=·"*" | ||
| 779 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 780 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 780 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 781 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 781 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 782 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 782 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 783 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 783 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 784 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 784 | include·install_policycoreutils-python-utils | 785 | include·install_policycoreutils-python-utils |
| Offset 805, 14 lines modified | Offset 805, 19 lines modified | ||
| 805 | Severity: ···low | 805 | Severity: ···low |
| 806 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils_installed | 806 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils_installed |
| 807 | Identifiers:·CCE-94097-3 | 807 | Identifiers:·CCE-94097-3 |
| 808 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001084 | 808 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001084 |
| 809 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227,·SRG-OS-000134-GPOS-00068 | 809 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227,·SRG-OS-000134-GPOS-00068 |
| 810 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-431010 | 810 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-431010 |
| 811 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261368r996548_rule | 811 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261368r996548_rule |
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 813 | [[packages]] | ||
| 814 | name·=·"policycoreutils" | ||
| 815 | version·=·"*" | ||
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 816 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 813 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 817 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 814 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 818 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 815 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 819 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 816 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 820 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 817 | -·name:·Ensure·policycoreutils·is·installed | 821 | -·name:·Ensure·policycoreutils·is·installed |
| 818 | ··package: | 822 | ··package: |
| Offset 824, 19 lines modified | Offset 829, 14 lines modified | ||
| 824 | ··-·DISA-STIG-SLEM-05-431010 | 829 | ··-·DISA-STIG-SLEM-05-431010 |
| 825 | ··-·enable_strategy | 830 | ··-·enable_strategy |
| 826 | ··-·low_complexity | 831 | ··-·low_complexity |
| 827 | ··-·low_disruption | 832 | ··-·low_disruption |
| 828 | ··-·low_severity | 833 | ··-·low_severity |
| 829 | ··-·no_reboot_needed | 834 | ··-·no_reboot_needed |
| 830 | ··-·package_policycoreutils_installed | 835 | ··-·package_policycoreutils_installed |
| 831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 832 | [[packages]] | ||
| 833 | name·=·"policycoreutils" | ||
| 834 | version·=·"*" | ||
| 835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 837 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 838 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 839 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 840 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 840 | include·install_policycoreutils | 841 | include·install_policycoreutils |
| Offset 16523, 14 lines modified | Offset 16523, 19 lines modified | ||
| 16523 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(D),·164.308(a)(5)(ii)(C),·164.310(a)(2)(iv),·164.310(d)(2) | 16523 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(D),·164.308(a)(5)(ii)(C),·164.310(a)(2)(iv),·164.310(d)(2) |
| 16524 | ·····················(iii),·164.312(b) | 16524 | ·····················(iii),·164.312(b) |
| 16525 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.5.3 | 16525 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.5.3 |
| 16526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000342-GPOS-00133 | 16526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000342-GPOS-00133 |
| 16527 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·10.3.3 | 16527 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·10.3.3 |
| 16528 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-653025 | 16528 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-653025 |
| 16529 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261413r996652_rule | 16529 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261413r996652_rule |
| 16530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 16531 | [[packages]] | ||
| 16532 | name·=·"audit-audispd-plugins" | ||
| 16533 | version·=·"*" | ||
| 16530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 16534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 16531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 16535 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 16532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 16536 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 16533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 16537 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 16534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 16538 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 16535 | -·name:·Ensure·audit-audispd-plugins·is·installed | 16539 | -·name:·Ensure·audit-audispd-plugins·is·installed |
| 16536 | ··package: | 16540 | ··package: |
| Offset 16544, 19 lines modified | Offset 16549, 14 lines modified | ||
| 16544 | ··-·PCI-DSSv4-10.3.3 | 16549 | ··-·PCI-DSSv4-10.3.3 |
| 16545 | ··-·enable_strategy | 16550 | ··-·enable_strategy |
| 16546 | ··-·low_complexity | 16551 | ··-·low_complexity |
| 16547 | ··-·low_disruption | 16552 | ··-·low_disruption |
| 16548 | ··-·medium_severity | 16553 | ··-·medium_severity |
| 16549 | ··-·no_reboot_needed | 16554 | ··-·no_reboot_needed |
| 16550 | ··-·package_audit-audispd-plugins_installed | 16555 | ··-·package_audit-audispd-plugins_installed |
| 16551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 16552 | [[packages]] | ||
| 16553 | name·=·"audit-audispd-plugins" | ||
| Max diff block lines reached; 190/5457 bytes (3.48%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d80:·6173·206f·6620·3230·323 | 00037d80:·6173·206f·6620·3230·3236·2d30·312d·3238··as·of·2026-01-28 | ||
| 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 19857, 237 lines modified | Offset 19857, 237 lines modified | ||
| 0004d900:·6574·3d22·2369·646d·3837·3135·2220·7461··et="#idm8715"·ta | 0004d900:·6574·3d22·2369·646d·3837·3135·2220·7461··et="#idm8715"·ta | ||
| 0004d910:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0004d910:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004d920:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0004d920:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004d930:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0004d930:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004d940:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0004d940:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004d950:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0004d950:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004d960:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0004d960:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004d970:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0004d980:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004d990:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004d9a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004d9b0:·6964·3d22·6964·6d38·3731·3522·3e3c·7461··id="idm8715"><ta | |||
| 0004d9c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0004d9d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0004d9e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0004d9f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0004da00:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0004da10:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0004da20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004da30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0004da40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004da50:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004da60:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0004da70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004da80:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0004da90:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 0004daa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0004dab0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0004dac0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0004dad0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0004dae0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0004daf0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0004db00:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d31··:.··-·NIST-800-1 | |||
| 0004db10:·3731·2d33·2e34·2e36·0a20·202d·204e·4953··71-3.4.6.··-·NIS | |||
| 0004d | 0004d970:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0004d980:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0004d990:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004d9a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004d9b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004d9c0:·6d38·3731·3522·3e3c·7072·653e·3c63·6f64··m8715"><pre><cod | |||
| 0004d9d0:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 0004d9e0:·6e73·2e73·6572·7669·6365·735d·0a6d·6173··ns.services].mas | |||
| 0004d9f0:·6b65·6420·3d20·5b22·6175·746f·6673·225d··ked·=·["autofs"] | |||
| 0004da00:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0004da10:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0004da20:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0004da30:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0004da40:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0004da50:·743d·2223·6964·6d38·3731·3622·2074·6162··t="#idm8716"·tab | |||
| 0004da60:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0004da70:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0004da80:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0004da90:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0004daa0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0004dab0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0004dac0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0004dad0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004dae0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004daf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004db00:·643d·2269·646d·3837·3136·223e·3c74·6162··d="idm8716"><tab | |||
| 0004db10:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004db20:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004db30:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004db40:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004db50:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004db60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004db70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004db80:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004db90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004dba0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004dbb0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004dbc0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004dbd0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004dbe0:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 0004dbf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0004dc00:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0004dc10:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0004dc20:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0004dc30:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0004dc40:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0004d | 0004dc50:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0004db40:·2d43·4d2d·3728·6129·0a20·202d·204e·4953··-CM-7(a).··-·NIS | |||
| 0004db50:·542d·3830·302d·3533·2d43·4d2d·3728·6229··T-800-53-CM-7(b) | |||
| 0004db60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004db70:·2d4d·502d·370a·2020·2d20·6469·7361·626c··-MP-7.··-·disabl | |||
| 0004db80:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0004db90:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0004dba0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0004dbb0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0004dbc0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0004dbd0:·6f74·5f6e·6565·6465·640a·2020·2d20·7365··ot_needed.··-·se | |||
| 0004dbe0:·7276·6963·655f·6175·746f·6673·5f64·6973··rvice_autofs_dis | |||
| 0004dbf0:·6162·6c65·640a·0a2d·206e·616d·653a·2044··abled..-·name:·D | |||
| 0004dc00:·6973·6162·6c65·2074·6865·2041·7574·6f6d··isable·the·Autom | |||
| 0004dc10:·6f75·6e74·6572·202d·2043·6f6c·6c65·6374··ounter·-·Collect | |||
| 0004dc20:·2073·7973·7465·6d64·2053·6572·7669·6365···systemd·Service | |||
| 0004dc30:·7320·5072·6573·656e·7420·696e·2074·6865··s·Present·in·the | |||
| 0004dc40:·2053·7973·7465·6d0a·2020·616e·7369·626c···System.··ansibl | |||
| 0004dc50:·652e·6275·696c·7469·6e2e·636f·6d6d·616e··e.builtin.comman | |||
| 0004dc60:·643a·2073·7973·7465·6d63·746c·202d·7120··d:·systemctl·-q· | |||
| 0004dc70:·6c69·7374·2d75·6e69·742d·6669·6c65·7320··list-unit-files· | |||
| 0004dc80:·2d2d·7479·7065·2073·6572·7669·6365·0a20··--type·service.· | |||
| 0004dc90:·2072·6567·6973·7465·723a·2073·6572·7669···register:·servi | |||
| 0004dca0:·6365·5f65·7869·7374·730a·2020·6368·616e··ce_exists.··chan | |||
| 0004dcb0:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0004dcc0:·2020·6661·696c·6564·5f77·6865·6e3a·2073····failed_when:·s | |||
| 0004dcd0:·6572·7669·6365·5f65·7869·7374·732e·7263··ervice_exists.rc | |||
| 0004dce0:·206e·6f74·2069·6e20·5b30·2c20·315d·0a20···not·in·[0,·1].· | |||
| 0004dcf0:·2063·6865·636b·5f6d·6f64·653a·2066·616c···check_mode:·fal | |||
| 0004dd00:·7365·0a20·2077·6865·6e3a·2028·2061·6e73··se.··when:·(·ans | |||
| 0004dd10:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| Max diff block lines reached; 157212/189696 bytes (82.88%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:uos:uniontech_os_server:20 | 43 | ····*·cpe:/o:uos:uniontech_os_server:20 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2026-01-28) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 991, 14 lines modified | Offset 991, 18 lines modified | ||
| 991 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 991 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 992 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 992 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 993 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 993 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 994 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 994 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 995 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 995 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 996 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG- | 996 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG- |
| 997 | ···························OS-000480-GPOS-00227 | 997 | ···························OS-000480-GPOS-00227 |
| 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 999 | [customizations.services] | ||
| 1000 | masked·=·["autofs"] | ||
| 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 999 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1002 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1000 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1003 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1001 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1004 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1002 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1005 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1003 | -·name:·Gather·the·package·facts | 1006 | -·name:·Gather·the·package·facts |
| 1004 | ··package_facts: | 1007 | ··package_facts: |
| Offset 1101, 18 lines modified | Offset 1105, 14 lines modified | ||
| 1101 | ··-·NIST-800-53-MP-7 | 1105 | ··-·NIST-800-53-MP-7 |
| 1102 | ··-·disable_strategy | 1106 | ··-·disable_strategy |
| 1103 | ··-·low_complexity | 1107 | ··-·low_complexity |
| 1104 | ··-·low_disruption | 1108 | ··-·low_disruption |
| 1105 | ··-·medium_severity | 1109 | ··-·medium_severity |
| 1106 | ··-·no_reboot_needed | 1110 | ··-·no_reboot_needed |
| 1107 | ··-·service_autofs_disabled | 1111 | ··-·service_autofs_disabled |
| 1108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1109 | [customizations.services] | ||
| 1110 | masked·=·["autofs"] | ||
| 1111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1116 | include·disable_autofs | 1117 | include·disable_autofs |
| Offset 1166, 14 lines modified | Offset 1166, 18 lines modified | ||
| 1166 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR | 1166 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR |
| 1167 | ···························5.3,·SR·7.1,·SR·7.6 | 1167 | ···························5.3,·SR·7.1,·SR·7.6 |
| 1168 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, | 1168 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, |
| 1169 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 1169 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 1170 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 | 1170 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1171 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1171 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1172 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1172 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1174 | [customizations.services] | ||
| 1175 | masked·=·["abrtd"] | ||
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1178 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services | 1181 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services |
| 1179 | Present | 1182 | Present |
| Offset 1249, 18 lines modified | Offset 1253, 14 lines modified | ||
| 1249 | ··-·NIST-800-53-CM-7(a) | 1253 | ··-·NIST-800-53-CM-7(a) |
| 1250 | ··-·disable_strategy | 1254 | ··-·disable_strategy |
| 1251 | ··-·low_complexity | 1255 | ··-·low_complexity |
| 1252 | ··-·low_disruption | 1256 | ··-·low_disruption |
| 1253 | ··-·medium_severity | 1257 | ··-·medium_severity |
| 1254 | ··-·no_reboot_needed | 1258 | ··-·no_reboot_needed |
| 1255 | ··-·service_abrtd_disabled | 1259 | ··-·service_abrtd_disabled |
| 1256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1257 | [customizations.services] | ||
| 1258 | masked·=·["abrtd"] | ||
| 1259 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1260 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1261 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1262 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1263 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1264 | include·disable_abrtd | 1265 | include·disable_abrtd |
| Offset 1297, 14 lines modified | Offset 1297, 18 lines modified | ||
| 1297 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR | 1297 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR |
| 1298 | ···························5.3,·SR·7.1,·SR·7.6 | 1298 | ···························5.3,·SR·7.1,·SR·7.6 |
| 1299 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, | 1299 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, |
| 1300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 1300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 1301 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 | 1301 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 1302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 1303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1305 | [customizations.services] | ||
| 1306 | masked·=·["ntpdate"] | ||
| 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1309 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the | 1312 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the |
| 1310 | ····System | 1313 | ····System |
| Offset 1382, 18 lines modified | Offset 1386, 14 lines modified | ||
| 1382 | ··-·NIST-800-53-CM-7(b) | 1386 | ··-·NIST-800-53-CM-7(b) |
| 1383 | ··-·disable_strategy | 1387 | ··-·disable_strategy |
| 1384 | ··-·low_complexity | 1388 | ··-·low_complexity |
| 1385 | ··-·low_disruption | 1389 | ··-·low_disruption |
| 1386 | ··-·low_severity | 1390 | ··-·low_severity |
| 1387 | ··-·no_reboot_needed | 1391 | ··-·no_reboot_needed |
| 1388 | ··-·service_ntpdate_disabled | 1392 | ··-·service_ntpdate_disabled |
| 1389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1390 | [customizations.services] | ||
| 1391 | masked·=·["ntpdate"] | ||
| 1392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 6728/12731 bytes (52.85%) of diff not shown. | |||
| Offset 63, 273 lines modified | Offset 63, 273 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | |||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 000004 | 00000450:·3c74·643e·496e·7374·616c·6c20·5041·4520··<td>Install·PAE· | ||
| 00000460:·4b65·726e·656c·206f·6e20·5375·7070·6f72··Kernel·on·Suppor | |||
| 00000470:·7465·6420·3332·2d62·6974·2078·3836·2053··ted·32-bit·x86·S | |||
| 00000480:·7973·7465·6d73·3c2f·7464·3e0a·2020·2020··ystems</td>.···· | |||
| 00000490:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 000004a0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 000004b0:·5379·7374·656d·7320·7468·6174·2061·7265··Systems·that·are | |||
| 000004c0:·2075·7369·6e67·2074·6865·2036·342d·6269···using·the·64-bi | |||
| 000004d0:·7420·7838·3620·6b65·726e·656c·2070·6163··t·x86·kernel·pac | |||
| 000004e0:·6b61·6765·0a64·6f20·6e6f·7420·6e65·6564··kage.do·not·need | |||
| 000004f0:·2074·6f20·696e·7374·616c·6c20·7468·6520···to·install·the· | |||
| 00000500:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 00000510:·6765·2062·6563·6175·7365·2074·6865·2036··ge·because·the·6 | |||
| 00000520:·342d·6269·740a·7838·3620·6b65·726e·656c··4-bit.x86·kernel | |||
| 00000530:·2061·6c72·6561·6479·2069·6e63·6c75·6465···already·include | |||
| 00000540:·7320·7468·6973·2073·7570·706f·7274·2e20··s·this·support.· | |||
| 00000550:·486f·7765·7665·722c·2069·6620·7468·6520··However,·if·the· | |||
| 00000560:·7379·7374·656d·2069·730a·3332·2d62·6974··system·is.32-bit | |||
| 00000570:·2061·6e64·2061·6c73·6f20·7375·7070·6f72···and·also·suppor | |||
| 00000580:·7473·2074·6865·2050·4145·2061·6e64·204e··ts·the·PAE·and·N | |||
| 00000590:·5820·6665·6174·7572·6573·2061·730a·6465··X·features·as.de | |||
| 000005a0:·7465·726d·696e·6564·2069·6e20·7468·6520··termined·in·the· | |||
| 000005b0:·7072·6576·696f·7573·2073·6563·7469·6f6e··previous·section | |||
| 000005c0:·2c20·7468·6520·6b65·726e·656c·2d50·4145··,·the·kernel-PAE | |||
| 000005d0:·2070·6163·6b61·6765·2073·686f·756c·640a···package·should. | |||
| 000005e0:·6265·2069·6e73·7461·6c6c·6564·2074·6f20··be·installed·to· | |||
| 000005f0:·656e·6162·6c65·2058·4420·6f72·204e·5820··enable·XD·or·NX· | |||
| 00000600:·7375·7070·6f72·742e·0a54·6865·203c·636f··support..The·<co | |||
| 00000610:·6465·3e6b·6572·6e65·6c2d·5041·453c·2f63··de>kernel-PAE</c | |||
| 00000620:·6f64·653e·2070·6163·6b61·6765·2063·616e··ode>·package·can | |||
| 00000630:·2062·6520·696e·7374·616c·6c65·6420·7769···be·installed·wi | |||
| 00000640:·7468·2074·6865·2066·6f6c·6c6f·7769·6e67··th·the·following | |||
| 00000650:·2063·6f6d·6d61·6e64·3a0a·3c70·7265·3e0a···command:.<pre>. | |||
| 00000660:·2420·7375·646f·2079·756d·2069·6e73·7461··$·sudo·yum·insta | |||
| 00000670:·6c6c·206b·6572·6e65·6c2d·5041·453c·2f70··ll·kernel-PAE</p | |||
| 00000680:·7265·3e0a·5468·6520·696e·7374·616c·6c61··re>.The·installa | |||
| 00000690:·7469·6f6e·2070·726f·6365·7373·2073·686f··tion·process·sho | |||
| 000006a0:·756c·6420·616c·736f·2068·6176·6520·636f··uld·also·have·co | |||
| 000006b0:·6e66·6967·7572·6564·2074·6865·0a62·6f6f··nfigured·the.boo | |||
| 000006c0:·746c·6f61·6465·7220·746f·206c·6f61·6420··tloader·to·load· | |||
| 000006d0:·7468·6520·6e65·7720·6b65·726e·656c·2061··the·new·kernel·a | |||
| 000006e0:·7420·626f·6f74·2e20·5665·7269·6679·2074··t·boot.·Verify·t | |||
| 000006f0:·6869·7320·6166·7465·7220·7265·626f·6f74··his·after·reboot | |||
| 00000700:·0a61·6e64·206d·6f64·6966·7920·3c74·743e··.and·modify·<tt> | |||
| 00000710:·2f65·7463·2f64·6566·6175·6c74·2f67·7275··/etc/default/gru | |||
| 00000720:·623c·2f74·743e·2069·6620·6e65·6365·7373··b</tt>·if·necess | |||
| 00000730:·6172·792e·0a20·2020·2020·203c·2f74·643e··ary..······</td> | |||
| 00000 | 00000740:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000 | 00000750:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000760:·2020·2020·204f·6e20·3332·2d62·6974·2073·······On·32-bit·s | |||
| 00000770:·7973·7465·6d73·2074·6861·7420·7375·7070··ystems·that·supp | |||
| 00000780:·6f72·7420·7468·6520·5844·206f·7220·4e58··ort·the·XD·or·NX | |||
| 00000790:·2062·6974·2c20·7468·6520·7665·6e64·6f72···bit,·the·vendor | |||
| 000007a0:·2d73·7570·706c·6965·640a·5041·4520·6b65··-supplied.PAE·ke | |||
| 000007b0:·726e·656c·2069·7320·7265·7175·6972·6564··rnel·is·required | |||
| 000007c0:·2074·6f20·656e·6162·6c65·2065·6974·6865···to·enable·eithe | |||
| 000007d0:·7220·4578·6563·7574·6520·4469·7361·626c··r·Execute·Disabl | |||
| 000007e0:·6520·2858·4429·206f·7220·4e6f·2045·7865··e·(XD)·or·No·Exe | |||
| 000007f0:·6375·7465·2028·4e58·2920·7375·7070·6f72··cute·(NX)·suppor | |||
| 00000800:·742e·0a20·2020·2020·203c·2f74·643e·0a20··t..······</td>.· | |||
| 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | |||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | |||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | |||
| 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | |||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005c0:·7320·6e6f·7420·6469·7361·626c·6564·2062··s·not·disabled·b | |||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 000006a0:·2074·6f20·7570·6461·7465·2063·6f6d·6d61···to·update·comma | |||
| 000006b0:·6e64·206c·696e·6520·666f·7220·616c·7265··nd·line·for·alre | |||
| 000006c0:·6164·7920·696e·7374·616c·6c65·6420·6b65··ady·installed·ke | |||
| 000006d0:·726e·656c·733a·0a3c·7072·653e·2320·6772··rnels:.<pre>#·gr | |||
| 000006e0:·7562·6279·202d·2d75·7064·6174·652d·6b65··ubby·--update-ke | |||
| 000006f0:·726e·656c·3d41·4c4c·202d·2d72·656d·6f76··rnel=ALL·--remov | |||
| 00000700:·652d·6172·6773·3d22·6e6f·736d·6170·223c··e-args="nosmap"< | |||
| 00000710:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 00000720:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000730:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000740:·2020·2020·2020·4469·7361·626c·696e·6720········Disabling· | |||
| 00000750:·534d·4150·2063·616e·2066·6163·696c·6974··SMAP·can·facilit | |||
| 00000760:·6174·6520·6578·706c·6f69·7461·7469·6f6e··ate·exploitation | |||
| 00000770:·206f·6620·7675·6c6e·6572·6162·696c·6974···of·vulnerabilit | |||
| 00000780:·6965·7320·6361·7573·6564·2062·7920·756e··ies·caused·by·un | |||
| 00000790:·696e·7465·6e64·6564·2061·6363·6573·7320··intended·access· | |||
| 000007a0:·616e·640a·6d61·6e69·7075·6c61·7469·6f6e··and.manipulation | |||
| 000007b0:·206f·6620·6461·7461·2069·6e20·7468·6520···of·data·in·the· | |||
| 000007c0:·7573·6572·2073·7061·6365·2e0a·2020·2020··user·space..···· | |||
| 00000 | 00000810:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 000007e0:·3e0a·2020·2020·3c74·723e·0a20·2020·2020··>.····<tr>.····· | |||
| 000007f0:·203c·7464·3e52·313c·2f74·643e·0a20·2020···<td>R1</td>.··· | |||
| 00000800:·2020·203c·7464·3e49·6e73·7461·6c6c·2074·····<td>Install·t | |||
| 00000810:·6865·2064·7261·6375·742d·6669·7073·2d61··he·dracut-fips-a | |||
| 00000820:· | 00000820:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | ||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·643e·5072··td>.······<td>Pr | |||
| Max diff block lines reached; 2905868/2942184 bytes (98.77%) of diff not shown. | |||
| Offset 1, 45 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 7 | 2 | 7 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 19 | ···········································································Use·of·weak·or·untested·encryption | ||
| 20 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 21 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 22 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 23 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 24 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 25 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 26 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 27 | ···········································································validated. | ||
| 28 | ···········································································Use·of·a·64-bit·operating·system | ||
| 29 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 30 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 31 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 32 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 33 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 34 | ···········································································bits. | ||
| 35 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 3 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 36 | ······························package·do·not·need·to·install·the·kernel- | 4 | ······························package·do·not·need·to·install·the·kernel- |
| 37 | ······························PAE·package·because·the·64-bit·x86·kernel | 5 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 38 | ······························already·includes·this·support.·However,·if | 6 | ······························already·includes·this·support.·However,·if |
| 39 | ······························the·system·is·32-bit·and·also·supports·the | 7 | ······························the·system·is·32-bit·and·also·supports·the |
| 40 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 8 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 41 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 9 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 47, 14 lines modified | Offset 15, 21 lines modified | ||
| 47 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 15 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 48 | ······························installed·with·the·following·command:········(NX)·support. | 16 | ······························installed·with·the·following·command:········(NX)·support. |
| 49 | ······························$·sudo·yum·install·kernel-PAE | 17 | ······························$·sudo·yum·install·kernel-PAE |
| 50 | ······························The·installation·process·should·also·have | 18 | ······························The·installation·process·should·also·have |
| 51 | ······························configured·the·bootloader·to·load·the·new | 19 | ······························configured·the·bootloader·to·load·the·new |
| 52 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 20 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 53 | ······························modify·/etc/default/grub·if·necessary. | 21 | ······························modify·/etc/default/grub·if·necessary. |
| 22 | ···········································································Use·of·a·64-bit·operating·system | ||
| 23 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 24 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 25 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 26 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 27 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 28 | ···········································································bits. | ||
| 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 29 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 55 | ······························mode·from·executing·user·space·code,·it·is | 30 | ······························mode·from·executing·user·space·code,·it·is |
| 56 | ······························enabled·by·default·since·Linux·kernel·3.0. | 31 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 57 | ······························But·it·could·be·disabled·through·kernel·boot | 32 | ······························But·it·could·be·disabled·through·kernel·boot |
| 58 | ······························parameters.·Ensure·that·Supervisor·Mode | 33 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 34 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 35 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 62, 14 lines modified | Offset 37, 39 lines modified | ||
| 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 37 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 38 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 64 | ······························argument·nosmep.·Run·the·following·command | 39 | ······························argument·nosmep.·Run·the·following·command |
| 65 | ······························to·update·command·line·for·already·installed | 40 | ······························to·update·command·line·for·already·installed |
| 66 | ······························kernels: | 41 | ······························kernels: |
| 67 | ······························#·grubby·--update-kernel=ALL·--remove- | 42 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 68 | ······························args="nosmep" | 43 | ······························args="nosmep" |
| 44 | ···········································································Use·of·weak·or·untested·encryption | ||
| 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 51 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 52 | ···········································································validated. | ||
| 53 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 54 | ······························mode·from·unintentionally·reading/writing | ||
| 55 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 56 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 57 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 58 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 59 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 60 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 61 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 63 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 64 | ······························argument·nosmap.·Run·the·following·command | ||
| 65 | ······························to·update·command·line·for·already·installed | ||
| 66 | ······························kernels: | ||
| 67 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 68 | ······························args="nosmap" | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 14 lines modified | Offset 99, 86 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························Microarchitectural·Data·Sampling·(MDS)·is·a | ||
| 107 | ······························hardware·vulnerability·which·allows | ||
| 108 | ······························unprivileged·speculative·access·to·data | ||
| 109 | ······························which·is·available·in·various·CPU·internal | ||
| 110 | ······························buffers.·When·performing·store,·load,·L1 | ||
| 111 | ······························refill·operations,·processors·write·data | ||
| 112 | ······························into·temporary·microarchitectural·structures | ||
| 113 | ······························(buffers),·and·the·data·in·the·buffer·can·be | ||
| 114 | ······························forwarded·to·load·operations·as·an | ||
| 115 | ······························optimization.·Under·certain·conditions,·data | ||
| 116 | ······························unrelated·to·the·load·operations·can·be | ||
| 117 | ······························speculatively·forwarded·from·the·buffers·to | ||
| Max diff block lines reached; 655120/670579 bytes (97.69%) of diff not shown. | |||
| Offset 41, 30 lines modified | Offset 41, 78 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 48 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········If·an·account·is·configured·for·password·authentication | ||
| 51 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 52 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 53 | 50 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | |
| 51 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 52 | their·UID·changed. | ||
| 53 | <br·/> | ||
| 54 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 55 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 56 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 57 | assigned. | ||
| 58 | ······</td> | ||
| 59 | ······<td·xml:lang="en-US"> | ||
| 60 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 61 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 62 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 63 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 64 | access·to·root·privileges·in·an·accountable·manner. | ||
| 65 | ······</td> | ||
| 66 | ····</tr> | ||
| 67 | ····<tr> | ||
| 68 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 69 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 70 | ······<td·xml:lang="en-US"> | ||
| 71 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 72 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 73 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 74 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 75 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 76 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 77 | plain·text·over·the·network.·By·default,·Oracle·Linux·7's | ||
| 78 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 79 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 80 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 81 | file·by·typing·the·following·command: | ||
| 82 | <pre> | ||
| 83 | $·sudo·echo·>·/etc/securetty | ||
| 84 | </pre> | ||
| 85 | ······</td> | ||
| 86 | ······<td·xml:lang="en-US"> | ||
| 87 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 88 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 89 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 90 | and·FISMA·Moderate·systems. | ||
| 91 | ······</td> | ||
| 92 | ····</tr> | ||
| 93 | ····<tr> | ||
| 94 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 95 | ······<td>Disable·SSH·Root·Login</td> | ||
| 96 | ······<td·xml:lang="en-US"> | ||
| 97 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 98 | system·directly·over·a·network. | ||
| 99 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 54 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 55 | <tt>/etc/pam.d/password-auth</tt> | ||
| 56 | 100 | <tt>/etc/ssh/sshd_config</tt>: | |
| 101 | <pre>PermitRootLogin·no</pre> | ||
| 57 | ······</td> | 102 | ······</td> |
| 58 | ······<td·xml:lang="en-US"> | 103 | ······<td·xml:lang="en-US"> |
| 59 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 60 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 61 | 104 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 105 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 106 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 107 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 108 | direct·attack·attempts·on·root's·password. | ||
| 62 | ······</td> | 109 | ······</td> |
| 63 | ····</tr> | 110 | ····</tr> |
| 64 | ····<tr> | 111 | ····<tr> |
| 65 | ······<td>3.1.1</td> | 112 | ······<td>3.1.1</td> |
| 66 | ······<td>Disable·GDM·Automatic·Login</td> | 113 | ······<td>Disable·GDM·Automatic·Login</td> |
| 67 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 68 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | 115 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| Offset 77, 28 lines modified | Offset 125, 63 lines modified | ||
| 77 | ······</td> | 125 | ······</td> |
| 78 | ······<td·xml:lang="en-US"> | 126 | ······<td·xml:lang="en-US"> |
| 79 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 127 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 80 | system·security. | 128 | system·security. |
| 81 | ······</td> | 129 | ······</td> |
| 82 | ····</tr> | 130 | ····</tr> |
| 83 | ····<tr> | 131 | ····<tr> |
| 84 | ······<td>3.1.1<br/>3. | 132 | ······<td>3.1.1<br/>3.1.5</td> |
| 85 | ······<td>Re | 133 | ······<td>Restrict·Virtual·Console·Root·Logins</td> |
| 86 | ······<td·xml:lang="en-US"> | 134 | ······<td·xml:lang="en-US"> |
| 87 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 88 | method,·providing·a·single·user·root·access·to·the·system | ||
| 89 | during·a·failed·boot·sequence. | ||
| 90 | <br·/><br·/> | ||
| 91 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 92 | 135 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | |
| 136 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 137 | <pre>vc/1 | ||
| 138 | vc/2 | ||
| 139 | vc/3 | ||
| 140 | vc/4</pre> | ||
| 93 | ······</td> | 141 | ······</td> |
| 94 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 95 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 96 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 97 | 143 | ········Preventing·direct·root·login·to·virtual·console·devices | |
| 144 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 145 | using·the·root·account. | ||
| 146 | ······</td> | ||
| 147 | ····</tr> | ||
| 148 | ····<tr> | ||
| 149 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 150 | ······<td>Restrict·Serial·Port·Root·Logins</td> | ||
| 151 | ······<td·xml:lang="en-US"> | ||
| 152 | ········To·restrict·root·logins·on·serial·ports, | ||
| 153 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 154 | <pre>ttyS0 | ||
| 155 | ttyS1</pre> | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| Max diff block lines reached; 459107/465579 bytes (98.61%) of diff not shown. | |||
| Offset 7706, 18 lines modified | Offset 7706, 18 lines modified | ||
| 0001e190:·7373·776f·7264·7320·6865·6c70·7320·656e··sswords·helps·en | 0001e190:·7373·776f·7264·7320·6865·6c70·7320·656e··sswords·helps·en | ||
| 0001e1a0:·7375·7265·2074·6861·7420·6120·636f·6d70··sure·that·a·comp | 0001e1a0:·7375·7265·2074·6861·7420·6120·636f·6d70··sure·that·a·comp | ||
| 0001e1b0:·726f·6d69·7365·6420·7061·7373·776f·7264··romised·password | 0001e1b0:·726f·6d69·7365·6420·7061·7373·776f·7264··romised·password | ||
| 0001e1c0:·2069·7320·6e6f·740a·7265·2d75·7365·6420···is·not.re-used· | 0001e1c0:·2069·7320·6e6f·740a·7265·2d75·7365·6420···is·not.re-used· | ||
| 0001e1d0:·6279·2061·2075·7365·722e·0a20·203c·2f74··by·a·user..··</t | 0001e1d0:·6279·2061·2075·7365·722e·0a20·203c·2f74··by·a·user..··</t | ||
| 0001e1e0:·643e·0a20·203c·7464·3e76·6172·5f70·6173··d>.··<td>var_pas | 0001e1e0:·643e·0a20·203c·7464·3e76·6172·5f70·6173··d>.··<td>var_pas | ||
| 0001e1f0:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | 0001e1f0:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | ||
| 0001e200:·6572·3d35·3c62·722f·3e76·6172·5f70·6173··er=5<br/>var_pas | |||
| 0001e210:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | |||
| 0001e2 | 0001e220:·6572·5f63·6f6e·7472·6f6c·5f66·6c61·673d··er_control_flag= | ||
| 0001e2 | 0001e230:·7265·7175·6972·6564·3c2f·7464·3e0a·3c2f··required</td>.</ | ||
| 0001e220:·5f70·6173·7377·6f72·645f·7061·6d5f·7265··_password_pam_re | |||
| 0001e230:·6d65·6d62·6572·3d35·3c2f·7464·3e0a·3c2f··member=5</td>.</ | |||
| 0001e240:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | 0001e240:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | ||
| 0001e250:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | 0001e250:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | ||
| 0001e260:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | 0001e260:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | ||
| 0001e270:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | 0001e270:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | ||
| 0001e280:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | 0001e280:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | ||
| 0001e290:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | 0001e290:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | ||
| 0001e2a0:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | 0001e2a0:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | ||
| Offset 7755, 19 lines modified | Offset 7755, 19 lines modified | ||
| 0001e4a0:·7072·6576·696f·7573·2070·6173·7377·6f72··previous·passwor | 0001e4a0:·7072·6576·696f·7573·2070·6173·7377·6f72··previous·passwor | ||
| 0001e4b0:·6473·2068·656c·7073·2065·6e73·7572·6520··ds·helps·ensure· | 0001e4b0:·6473·2068·656c·7073·2065·6e73·7572·6520··ds·helps·ensure· | ||
| 0001e4c0:·7468·6174·2061·2063·6f6d·7072·6f6d·6973··that·a·compromis | 0001e4c0:·7468·6174·2061·2063·6f6d·7072·6f6d·6973··that·a·compromis | ||
| 0001e4d0:·6564·2070·6173·7377·6f72·6420·6973·206e··ed·password·is·n | 0001e4d0:·6564·2070·6173·7377·6f72·6420·6973·206e··ed·password·is·n | ||
| 0001e4e0:·6f74·0a72·652d·7573·6564·2062·7920·6120··ot.re-used·by·a· | 0001e4e0:·6f74·0a72·652d·7573·6564·2062·7920·6120··ot.re-used·by·a· | ||
| 0001e4f0:·7573·6572·2e0a·2020·3c2f·7464·3e0a·2020··user..··</td>.·· | 0001e4f0:·7573·6572·2e0a·2020·3c2f·7464·3e0a·2020··user..··</td>.·· | ||
| 0001e500:·3c74·643e·7661·725f·7061·7373·776f·7264··<td>var_password | 0001e500:·3c74·643e·7661·725f·7061·7373·776f·7264··<td>var_password | ||
| 0001e510:·5f70·616d·5f72·656d·656d·6265·723d·353c··_pam_remember=5< | |||
| 0001e520:·6272·2f3e·7661·725f·7061·7373·776f·7264··br/>var_password | |||
| 0001e5 | 0001e530:·5f70·616d·5f72·656d·656d·6265·725f·636f··_pam_remember_co | ||
| 0001e5 | 0001e540:·6e74·726f·6c5f·666c·6167·3d72·6571·7569··ntrol_flag=requi | ||
| 0001e530:·7265·643c·6272·2f3e·7661·725f·7061·7373··red<br/>var_pass | |||
| 0001e540:·776f·7264·5f70·616d·5f72·656d·656d·6265··word_pam_remembe | |||
| 0001e550:·72 | 0001e550:·7265·643c·2f74·643e·0a3c·2f74·723e·0a3c··red</td>.</tr>.< | ||
| 0001e560:·7472·3e0a·2020·3c74·643e·4941·2d35·2863··tr>.··<td>IA-5(c | 0001e560:·7472·3e0a·2020·3c74·643e·4941·2d35·2863··tr>.··<td>IA-5(c | ||
| 0001e570:·293c·6272·2f3e·4941·2d35·2831·2928·6129··)<br/>IA-5(1)(a) | 0001e570:·293c·6272·2f3e·4941·2d35·2831·2928·6129··)<br/>IA-5(1)(a) | ||
| 0001e580:·3c62·722f·3e43·4d2d·3628·6129·3c62·722f··<br/>CM-6(a)<br/ | 0001e580:·3c62·722f·3e43·4d2d·3628·6129·3c62·722f··<br/>CM-6(a)<br/ | ||
| 0001e590:·3e49·412d·3528·3429·3c2f·7464·3e0a·2020··>IA-5(4)</td>.·· | 0001e590:·3e49·412d·3528·3429·3c2f·7464·3e0a·2020··>IA-5(4)</td>.·· | ||
| 0001e5a0:·3c74·643e·4e2f·413c·2f74·643e·0a20·203c··<td>N/A</td>.··< | 0001e5a0:·3c74·643e·4e2f·413c·2f74·643e·0a20·203c··<td>N/A</td>.··< | ||
| 0001e5b0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | 0001e5b0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | ||
| 0001e5c0:·666f·7263·6573·2050·6173·7377·6f72·6420··forces·Password· | 0001e5c0:·666f·7263·6573·2050·6173·7377·6f72·6420··forces·Password· |
| Offset 2580, 28 lines modified | Offset 2580, 28 lines modified | ||
| 2580 | ··············································································ensuring·a·larger | 2580 | ··············································································ensuring·a·larger |
| 2581 | ··············································································search·space. | 2581 | ··············································································search·space. |
| 2582 | ··································Do·not·allow·users·to·reuse·recent | 2582 | ··································Do·not·allow·users·to·reuse·recent |
| 2583 | ··································passwords.·This·can·be·accomplished·by | 2583 | ··································passwords.·This·can·be·accomplished·by |
| 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2585 | ··································pam_pwhistory·PAM·module.···················of·previous | 2585 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2586 | IA-5(f)·······································································passwords·helps | 2586 | IA-5(f)·······································································passwords·helps |
| 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember | 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember=5 |
| 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember= | 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember_control_flag=required |
| 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2590 | ··············································································used·by·a·user. | 2590 | ··············································································used·by·a·user. |
| 2591 | ··································For·example: | 2591 | ··································For·example: |
| 2592 | ··································password·required·pam_pwhistory.so | 2592 | ··································password·required·pam_pwhistory.so |
| 2593 | ··································use_authtok·remember=5 | 2593 | ··································use_authtok·remember=5 |
| 2594 | ··································Do·not·allow·users·to·reuse·recent | 2594 | ··································Do·not·allow·users·to·reuse·recent |
| 2595 | ··································passwords.·This·can·be·accomplished·by | 2595 | ··································passwords.·This·can·be·accomplished·by |
| 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2597 | ··································pam_pwhistory·PAM·module.···················of·previous | 2597 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2598 | IA-5(f)·······································································passwords·helps | 2598 | IA-5(f)·······································································passwords·helps |
| 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember | 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember=5 |
| 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember= | 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember_control_flag=required |
| 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2602 | ··············································································used·by·a·user. | 2602 | ··············································································used·by·a·user. |
| 2603 | ··································For·example: | 2603 | ··································For·example: |
| 2604 | ··································password·required·pam_pwhistory.so | 2604 | ··································password·required·pam_pwhistory.so |
| 2605 | ··································use_authtok·remember=5 | 2605 | ··································use_authtok·remember=5 |
| 2606 | ··············································································Use·of·a·complex | 2606 | ··············································································Use·of·a·complex |
| 2607 | ··············································································password·helps·to | 2607 | ··············································································password·helps·to |
| Offset 64, 14210 lines modified | Offset 64, 14210 lines modified | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | Diff chunk too large, falling back to line-by-line diff (1356 lines added, 1356 lines removed) | |
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e4 | 00000460:·6329·3c62·722f·3e43·4d2d·3628·6129·3c2f··c)<br/>CM-6(a)</ | ||
| 00000470:·7 | 00000470:·7464·3e0a·2020·2020·2020·3c74·643e·5265··td>.······<td>Re | ||
| 00000480:· | 00000480:·636f·7264·2045·7665·6e74·7320·7468·6174··cord·Events·that | ||
| 00000490:·20 | 00000490:·204d·6f64·6966·7920·7468·6520·5379·7374···Modify·the·Syst | ||
| 000004a0:· | 000004a0:·656d·2773·2044·6973·6372·6574·696f·6e61··em's·Discretiona | ||
| 000004b0:·7 | 000004b0:·7279·2041·6363·6573·7320·436f·6e74·726f··ry·Access·Contro | ||
| 000004c0:·6c | 000004c0:·6c73·202d·2063·686d·6f64·3c2f·7464·3e0a··ls·-·chmod</td>. | ||
| 000004d0:·20 | 000004d0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000004e0:· | 000004e0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000004f0:·2 | 000004f0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| 00000500:·2 | 00000500:·2c20·7468·6520·6175·6469·7420·7379·7374··,·the·audit·syst | ||
| 00000510:·6 | 00000510:·656d·2073·686f·756c·6420·636f·6c6c·6563··em·should·collec | ||
| 00000520:·7 | 00000520:·7420·6669·6c65·2070·6572·6d69·7373·696f··t·file·permissio | ||
| 00000530:·6 | 00000530:·6e0a·6368·616e·6765·7320·666f·7220·616c··n.changes·for·al | ||
| 00000540:· | 00000540:·6c20·7573·6572·7320·616e·6420·726f·6f74··l·users·and·root | ||
| 00000550:· | 00000550:·2e20·4966·2074·6865·203c·7474·3e61·7564··.·If·the·<tt>aud | ||
| 00000560:· | 00000560:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 00000570:·6 | 00000570:·6973·2063·6f6e·6669·6775·7265·6420·746f··is·configured·to | ||
| 00000580:· | 00000580:·0a75·7365·2074·6865·203c·7474·3e61·7567··.use·the·<tt>aug | ||
| 00000590:·6 | 00000590:·656e·7275·6c65·733c·2f74·743e·2070·726f··enrules</tt>·pro | ||
| 000005a0:·6 | 000005a0:·6772·616d·2074·6f20·7265·6164·2061·7564··gram·to·read·aud | ||
| 000005b0:· | 000005b0:·6974·2072·756c·6573·2064·7572·696e·6720··it·rules·during· | ||
| 000005c0:·6 | 000005c0:·6461·656d·6f6e·2073·7461·7274·7570·0a28··daemon·startup.( | ||
| 000005d0:·6 | 000005d0:·7468·6520·6465·6661·756c·7429·2c20·6164··the·default),·ad | ||
| 000005e0:· | 000005e0:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 000005f0:·6 | 000005f0:·6c69·6e65·2074·6f20·6120·6669·6c65·2077··line·to·a·file·w | ||
| 00000600:·6 | 00000600:·6974·6820·7375·6666·6978·203c·7474·3e2e··ith·suffix·<tt>. | ||
| 00000610:· | 00000610:·7275·6c65·733c·2f74·743e·2069·6e0a·7468··rules</tt>·in.th | ||
| 00000620:·6 | 00000620:·6520·6469·7265·6374·6f72·7920·3c74·743e··e·directory·<tt> | ||
| 00000630:· | 00000630:·2f65·7463·2f61·7564·6974·2f72·756c·6573··/etc/audit/rules | ||
| 00000640:· | 00000640:·2e64·3c2f·7474·3e3a·0a3c·7072·653e·2d61··.d</tt>:.<pre>-a | ||
| 00000650:· | 00000650:·2061·6c77·6179·732c·6578·6974·202d·4620···always,exit·-F· | ||
| 00000660:· | 00000660:·6172·6368·3d62·3332·202d·5320·6368·6d6f··arch=b32·-S·chmo | ||
| 00000670:·6 | 00000670:·6420·2d46·2061·7569·6426·6774·3b3d·3130··d·-F·auid>=10 | ||
| 00000680:·202d·4620· | 00000680:·3030·202d·4620·6175·6964·213d·756e·7365··00·-F·auid!=unse | ||
| 00000690:· | 00000690:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | ||
| 000006a0:· | 000006a0:·643c·2f70·7265·3e0a·4966·2074·6865·2073··d</pre>.If·the·s | ||
| 000006b0:· | 000006b0:·7973·7465·6d20·6973·2036·3420·6269·7420··ystem·is·64·bit· | ||
| 000006c0:· | 000006c0:·7468·656e·2061·6c73·6f20·6164·6420·7468··then·also·add·th | ||
| 000006d0:·65 | 000006d0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 000006e0:· | 000006e0:·3a0a·3c70·7265·3e2d·6120·616c·7761·7973··:.<pre>-a·always | ||
| 000006f0:· | 000006f0:·2c65·7869·7420·2d46·2061·7263·683d·6236··,exit·-F·arch=b6 | ||
| 00000700:· | 00000700:·3420·2d53·2063·686d·6f64·202d·4620·6175··4·-S·chmod·-F·au | ||
| 00000710:·6 | 00000710:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000720:·7 | 00000720:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 00000730:· | 00000730:·793d·7065·726d·5f6d·6f64·3c2f·7072·653e··y=perm_mod</pre> | ||
| 00000740:· | 00000740:·0a49·6620·7468·6520·3c74·743e·6175·6469··.If·the·<tt>audi | ||
| 00000750:·6 | 00000750:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000760:· | 00000760:·7320·636f·6e66·6967·7572·6564·2074·6f20··s·configured·to· | ||
| 00000770:· | 00000770:·7573·6520·7468·6520·3c74·743e·6175·6469··use·the·<tt>audi | ||
| 00000780:·6 | 00000780:·7463·746c·3c2f·7474·3e0a·7574·696c·6974··tctl</tt>.utilit | ||
| 00000790:·7 | 00000790:·7920·746f·2072·6561·6420·6175·6469·7420··y·to·read·audit· | ||
| 000007a0:· | 000007a0:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 000007b0:· | 000007b0:·6d6f·6e20·7374·6172·7475·702c·2061·6464··mon·startup,·add | ||
| 000007c0:·2 | 000007c0:·2074·6865·2066·6f6c·6c6f·7769·6e67·206c···the·following·l | ||
| 000007d0:· | 000007d0:·696e·6520·746f·0a3c·7474·3e2f·6574·632f··ine·to.<tt>/etc/ | ||
| 000007e0:· | 000007e0:·6175·6469·742f·6175·6469·742e·7275·6c65··audit/audit.rule | ||
| 000007f0:·7 | 000007f0:·733c·2f74·743e·2066·696c·653a·0a3c·7072··s</tt>·file:.<pr | ||
| 00000800:·6 | 00000800:·653e·2d61·2061·6c77·6179·732c·6578·6974··e>-a·always,exit | ||
| 00000810:· | 00000810:·202d·4620·6172·6368·3d62·3332·202d·5320···-F·arch=b32·-S· | ||
| 00000820:· | 00000820:·6368·6d6f·6420·2d46·2061·7569·6426·6774··chmod·-F·auid> | ||
| 00000830:·3 | 00000830:·3b3d·3130·3030·202d·4620·6175·6964·213d··;=1000·-F·auid!= | ||
| 00000840:· | 00000840:·756e·7365·7420·2d46·206b·6579·3d70·6572··unset·-F·key=per | ||
| 00000850:· | 00000850:·6d5f·6d6f·643c·2f70·7265·3e0a·4966·2074··m_mod</pre>.If·t | ||
| 00000860:· | 00000860:·6865·2073·7973·7465·6d20·6973·2036·3420··he·system·is·64· | ||
| 00000870:·7 | 00000870:·6269·7420·7468·656e·2061·6c73·6f20·6164··bit·then·also·ad | ||
| 00000880:· | 00000880:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 00000890:· | 00000890:·6c69·6e65·3a0a·3c70·7265·3e2d·6120·616c··line:.<pre>-a·al | ||
| 000008a0:·7 | 000008a0:·7761·7973·2c65·7869·7420·2d46·2061·7263··ways,exit·-F·arc | ||
| 000008b0:·6 | 000008b0:·683d·6236·3420·2d53·2063·686d·6f64·202d··h=b64·-S·chmod·- | ||
| 000008c0:· | 000008c0:·4620·6175·6964·2667·743b·3d31·3030·3020··F·auid>=1000· | ||
| 000008d0:· | 000008d0:·2d46·2061·7569·6421·3d75·6e73·6574·202d··-F·auid!=unset·- | ||
| 000008e0:· | 000008e0:·4620·6b65·793d·7065·726d·5f6d·6f64·3c2f··F·key=perm_mod</ | ||
| 000008f0:· | 000008f0:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 00000900:· | 00000900:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000910:· | 00000910:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000920:· | 00000920:·2020·2020·2054·6865·2063·6861·6e67·696e·······The·changin | ||
| 00000930:·6 | 00000930:·6720·6f66·2066·696c·6520·7065·726d·6973··g·of·file·permis | ||
| 00000940:·7 | 00000940:·7369·6f6e·7320·636f·756c·6420·696e·6469··sions·could·indi | ||
| 00000950:·6 | 00000950:·6361·7465·2074·6861·7420·6120·7573·6572··cate·that·a·user | ||
| 00000960:· | 00000960:·2069·7320·6174·7465·6d70·7469·6e67·2074···is·attempting·t | ||
| 00000970:·6 | 00000970:·6f0a·6761·696e·2061·6363·6573·7320·746f··o.gain·access·to | ||
| 00000980:· | 00000980:·2069·6e66·6f72·6d61·7469·6f6e·2074·6861···information·tha | ||
| 00000990:· | 00000990:·7420·776f·756c·6420·6f74·6865·7277·6973··t·would·otherwis | ||
| 000009a0:· | 000009a0:·6520·6265·2064·6973·616c·6c6f·7765·642e··e·be·disallowed. | ||
| 000009b0:· | 000009b0:·2041·7564·6974·696e·6720·4441·4320·6d6f···Auditing·DAC·mo | ||
| 000009c0:·6 | 000009c0:·6469·6669·6361·7469·6f6e·730a·6361·6e20··difications.can· | ||
| 000009d0:· | 000009d0:·6661·6369·6c69·7461·7465·2074·6865·2069··facilitate·the·i | ||
| 000009e0:·6 | 000009e0:·6465·6e74·6966·6963·6174·696f·6e20·6f66··dentification·of | ||
| 000009f0:· | 000009f0:·2070·6174·7465·726e·7320·6f66·2061·6275···patterns·of·abu | ||
| 00000a00:· | 00000a00:·7365·2061·6d6f·6e67·2062·6f74·6820·6175··se·among·both·au | ||
| 00000a10:· | 00000a10:·7468·6f72·697a·6564·2061·6e64·0a75·6e61··thorized·and.una | ||
| 00000a20:· | 00000a20:·7574·686f·7269·7a65·6420·7573·6572·732e··uthorized·users. | ||
| 00000a30:· | 00000a30:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | ||
| 00000a40:· | 00000a40:·203c·2f74·723e·0a20·2020·203c·7472·3e0a···</tr>.····<tr>. | ||
| 00000a50:· | 00000a50:·2020·2020·2020·3c74·643e·4155·2d32·2864········<td>AU-2(d | ||
| 00000a60:· | 00000a60:·293c·6272·2f3e·4155·2d31·3228·6329·3c62··)<br/>AU-12(c)<b | ||
| 00000a70:·2 | 00000a70:·722f·3e41·432d·3628·3929·3c62·722f·3e43··r/>AC-6(9)<br/>C | ||
| 00000a80:· | 00000a80:·4d2d·3628·6129·3c2f·7464·3e0a·2020·2020··M-6(a)</td>.···· | ||
| 00000a90:·20 | 00000a90:·2020·3c74·643e·5265·636f·7264·2041·7474····<td>Record·Att | ||
| 00000aa0:·6 | 00000aa0:·656d·7074·7320·746f·2041·6c74·6572·204c··empts·to·Alter·L | ||
| 00000ab0:· | 00000ab0:·6f67·6f6e·2061·6e64·204c·6f67·6f75·7420··ogon·and·Logout· | ||
| 00000ac0:· | 00000ac0:·4576·656e·7473·202d·2074·616c·6c79·6c6f··Events·-·tallylo | ||
| 00000ad0:·7464 | 00000ad0:·673c·2f74·643e·0a20·2020·2020·203c·7464··g</td>.······<td | ||
| 00000ae0:·20 | 00000ae0:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00000af0:· | 00000af0:·223e·0a20·2020·2020·2020·2054·6865·2061··">.········The·a | ||
| 00000b00:· | 00000b00:·7564·6974·2073·7973·7465·6d20·616c·7265··udit·system·alre | ||
| 00000b10:· | 00000b10:·6164·7920·636f·6c6c·6563·7473·206c·6f67··ady·collects·log | ||
| 00000b20:·6 | 00000b20:·696e·2069·6e66·6f72·6d61·7469·6f6e·2066··in·information·f | ||
| 00000b30:· | 00000b30:·6f72·2061·6c6c·2075·7365·7273·0a61·6e64··or·all·users.and | ||
| 00000b40:·6 | 00000b40:·2072·6f6f·742e·2049·6620·7468·6520·3c74···root.·If·the·<t | ||
| 00000b50:· | 00000b50:·743e·6175·6469·7464·3c2f·7474·3e20·6461··t>auditd</tt>·da | ||
| 00000b60:·6 | 00000b60:·656d·6f6e·2069·7320·636f·6e66·6967·7572··emon·is·configur | ||
| 00000b70:· | 00000b70:·6564·2074·6f20·7573·6520·7468·650a·3c74··ed·to·use·the.<t | ||
| 00000b80:· | 00000b80:·743e·6175·6765·6e72·756c·6573·3c2f·7474··t>augenrules</tt | ||
| 00000b90:· | 00000b90:·3e20·7072·6f67·7261·6d20·746f·2072·6561··>·program·to·rea | ||
| 00000ba0:· | 00000ba0:·6420·6175·6469·7420·7275·6c65·7320·6475··d·audit·rules·du | ||
| 00000bb0:· | 00000bb0:·7269·6e67·2064·6165·6d6f·6e20·7374·6172··ring·daemon·star | ||
| 00000bc0:· | 00000bc0:·7475·7020·2874·6865·0a64·6566·6175·6c74··tup·(the.default | ||
| Max diff block lines reached; 7098945/7286651 bytes (97.42%) of diff not shown. | |||
| Offset 41, 14 lines modified | Offset 41, 28 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>AGD_PRE.1<br/>AGD_OPE.1</td> | 47 | ······<td>AGD_PRE.1<br/>AGD_OPE.1</td> |
| 48 | ······<td>Install·openscap-scanner·Package</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········The·<code>openscap-scanner</code>·package·can·be·installed·with·the·following·command: | ||
| 51 | <pre> | ||
| 52 | $·sudo·yum·install·openscap-scanner</pre> | ||
| 53 | ······</td> | ||
| 54 | ······<td·xml:lang="en-US"> | ||
| 55 | ········<tt>openscap-scanner</tt>·contains·the·<tt>oscap</tt>·command·line·tool.·This·tool·is·a | ||
| 56 | configuration·and·vulnerability·scanner,·capable·of·performing·compliance·checking·using | ||
| 57 | SCAP·content. | ||
| 58 | ······</td> | ||
| 59 | ····</tr> | ||
| 60 | ····<tr> | ||
| 61 | ······<td>AGD_PRE.1<br/>AGD_OPE.1</td> | ||
| 48 | ······<td>Install·scap-security-guide·Package</td> | 62 | ······<td>Install·scap-security-guide·Package</td> |
| 49 | ······<td·xml:lang="en-US"> | 63 | ······<td·xml:lang="en-US"> |
| 50 | ········The·<code>scap-security-guide</code>·package·can·be·installed·with·the·following·command: | 64 | ········The·<code>scap-security-guide</code>·package·can·be·installed·with·the·following·command: |
| 51 | <pre> | 65 | <pre> |
| 52 | $·sudo·yum·install·scap-security-guide</pre> | 66 | $·sudo·yum·install·scap-security-guide</pre> |
| 53 | ······</td> | 67 | ······</td> |
| 54 | ······<td·xml:lang="en-US"> | 68 | ······<td·xml:lang="en-US"> |
| Offset 60, 39 lines modified | Offset 74, 50 lines modified | ||
| 60 | A·system·administrator·can·use·the·<tt>oscap</tt>·CLI·tool·from·the·<tt>openscap-scanner</tt> | 74 | A·system·administrator·can·use·the·<tt>oscap</tt>·CLI·tool·from·the·<tt>openscap-scanner</tt> |
| 61 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify | 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify |
| 62 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual | 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual |
| 63 | page·for·futher·information. | 77 | page·for·futher·information. |
| 64 | ······</td> | 78 | ······</td> |
| 65 | ····</tr> | 79 | ····</tr> |
| 66 | ····<tr> | 80 | ····<tr> |
| 67 | ······<td>AGD_PRE.1<br/>AGD_OPE.1</td> | ||
| 68 | ······<td> | 81 | ······<td>FAU_GEN.1</td> |
| 82 | ······<td>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</td> | ||
| 69 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 70 | ········The·<code>openscap-scanner</code>·package·can·be·installed·with·the·following·command: | ||
| 71 | <pre> | ||
| 72 | 84 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, | |
| 85 | check·that·all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have·<tt>audit=1</tt> | ||
| 86 | included·in·its·options.<br·/> | ||
| 87 | To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit, | ||
| 88 | add·<tt>audit=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 73 | ······</td> | 89 | ······</td> |
| 74 | ······<td·xml:lang="en-US"> | 90 | ······<td·xml:lang="en-US"> |
| 75 | ········<tt>openscap-scanner</tt>·contains·the·<tt>oscap</tt>·command·line·tool.·This·tool·is·a | ||
| 76 | configuration·and·vulnerability·scanner,·capable·of·performing·compliance·checking·using | ||
| 77 | 91 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | |
| 92 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | ||
| 93 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | ||
| 94 | ensures·it·is·set·for·every·process·during·boot. | ||
| 78 | ······</td> | 95 | ······</td> |
| 79 | ····</tr> | 96 | ····</tr> |
| 80 | ····<tr> | 97 | ····<tr> |
| 81 | ······<td>FAU_GEN.1</td> | 98 | ······<td>FAU_GEN.1</td> |
| 82 | ······<td> | 99 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> |
| 83 | ······<td·xml:lang="en-US"> | 100 | ······<td·xml:lang="en-US"> |
| 84 | ········To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command | ||
| 85 | after·writing·<abbr·title="$var_auditd_freq"><tt>50</tt></abbr>·records,·set·<tt>freq</tt>·to·<tt><abbr·title="$var_auditd_freq"><tt>50</tt></abbr></tt> | ||
| 86 | 101 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start | |
| 102 | prior·to·the·audit·daemon,·add·the·argument·<tt>audit=1</tt>·to·the·default | ||
| 103 | GRUB·2·command·line·for·the·Linux·operating·system. | ||
| 104 | To·ensure·that·<tt>audit=1</tt>·is·added·as·a·kernel·command·line | ||
| 105 | argument·to·newly·installed·kernels,·add·<tt>audit=1</tt>·to·the | ||
| 106 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 107 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 108 | <pre>GRUB_CMDLINE_LINUX="...·audit=1·..."</pre> | ||
| 109 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="audit=1"</pre> | ||
| 87 | ······</td> | 110 | ······</td> |
| 88 | ······<td·xml:lang="en-US"> | 111 | ······<td·xml:lang="en-US"> |
| 89 | ········If·option·<tt>freq</tt>·isn't·set·to·<tt><sub·idref="var_auditd_freq"·/></tt>,·the·flush·to·disk | ||
| 90 | may·happen·after·higher·number·of·records,·increasing·the·danger | ||
| 91 | o | 112 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether |
| 113 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | ||
| 114 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | ||
| 115 | ensures·it·is·set·for·every·process·during·boot. | ||
| 92 | ······</td> | 116 | ······</td> |
| 93 | ····</tr> | 117 | ····</tr> |
| 94 | ····<tr> | 118 | ····<tr> |
| 95 | ······<td>FAU_GEN.1</td> | 119 | ······<td>FAU_GEN.1</td> |
| 96 | ······<td>Include·Local·Events·in·Audit·Logs</td> | 120 | ······<td>Include·Local·Events·in·Audit·Logs</td> |
| 97 | ······<td·xml:lang="en-US"> | 121 | ······<td·xml:lang="en-US"> |
| 98 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set | 122 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set |
| Offset 102, 32 lines modified | Offset 127, 14 lines modified | ||
| 102 | ······<td·xml:lang="en-US"> | 127 | ······<td·xml:lang="en-US"> |
| 103 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from | 128 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from |
| 104 | network·will·be·aggregated. | 129 | network·will·be·aggregated. |
| 105 | ······</td> | 130 | ······</td> |
| 106 | ····</tr> | 131 | ····</tr> |
| 107 | ····<tr> | 132 | ····<tr> |
| 108 | ······<td>FAU_GEN.1</td> | 133 | ······<td>FAU_GEN.1</td> |
| 109 | ······<td>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</td> | ||
| 110 | ······<td·xml:lang="en-US"> | ||
| 111 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, | ||
| 112 | check·that·all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have·<tt>audit=1</tt> | ||
| 113 | included·in·its·options.<br·/> | ||
| 114 | To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit, | ||
| 115 | add·<tt>audit=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 116 | ······</td> | ||
| 117 | ······<td·xml:lang="en-US"> | ||
| 118 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | ||
| 119 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | ||
| 120 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | ||
| 121 | ensures·it·is·set·for·every·process·during·boot. | ||
| 122 | ······</td> | ||
| 123 | ····</tr> | ||
| 124 | ····<tr> | ||
| 125 | ······<td>FAU_GEN.1</td> | ||
| 126 | ······<td>Enable·auditd·Service</td> | 134 | ······<td>Enable·auditd·Service</td> |
| 127 | ······<td·xml:lang="en-US"> | 135 | ······<td·xml:lang="en-US"> |
| 128 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of | 136 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of |
| 129 | the·Linux·Auditing·System,·as·it·is·responsible·for·writing·audit·records·to | 137 | the·Linux·Auditing·System,·as·it·is·responsible·for·writing·audit·records·to |
| 130 | disk. | 138 | disk. |
| 131 | The·<code>auditd</code>·service·can·be·enabled·with·the·following·command: | 139 | The·<code>auditd</code>·service·can·be·enabled·with·the·following·command: |
| Offset 142, 62 lines modified | Offset 149, 65 lines modified | ||
| 142 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of | 149 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of |
| 143 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they | 150 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they |
| 144 | can·be·held·accountable·for·their·actions. | 151 | can·be·held·accountable·for·their·actions. |
| 145 | ······</td> | 152 | ······</td> |
| 146 | ····</tr> | 153 | ····</tr> |
| Max diff block lines reached; 526513/532659 bytes (98.85%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 26 lines modified | Offset 157, 26 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 167 | 166 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | network. | ||
| 168 | ······</td> | 169 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 171 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 172 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | 180 | ······<td>Install·iptables·Package</td> |
| 181 | ······<td·xml:lang="en-US"> | 181 | ······<td·xml:lang="en-US"> |
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| Offset 187, 26 lines modified | Offset 187, 26 lines modified | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering |
| 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP |
| 189 | masquerading,·etc. | 189 | masquerading,·etc. |
| 190 | ······</td> | 190 | ······</td> |
| 191 | ····</tr> | 191 | ····</tr> |
| 192 | ····<tr> | 192 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 194 | ······<td> | 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 195 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 196 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | network. | ||
| 199 | ······</td> | 198 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 199 | ······<td·xml:lang="en-US"> |
| 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | |
| 201 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 205 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 38 lines modified | Offset 246, 28 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 296557/303139 bytes (97.83%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 14 lines modified | Offset 112, 40 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 121 | ····················································································processes·on | ||
| 122 | ····················································································machine·and·is | ||
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 125 | ····················································································system.·The | ||
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 129 | ····················································································network·traffic | ||
| 130 | ····················································································should·be·seen,·all | ||
| 131 | ····················································································other·interfaces | ||
| 132 | ····················································································should·ignore | ||
| 133 | ····················································································traffic·on·this | ||
| 134 | ····················································································network·as·an·anti- | ||
| 135 | ····················································································spoofing·measure. | ||
| 136 | ····················································································iptables·controls | ||
| 137 | ····················································································the·Linux·kernel | ||
| 138 | ····················································································network·packet | ||
| 139 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 140 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 141 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 142 | ····················································································set·up·firewalls | ||
| 143 | ····················································································and·IP | ||
| 144 | ····················································································masquerading,·etc. | ||
| 119 | ····················································································A·TCP·SYN·flood | 145 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 146 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 147 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 148 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 149 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 150 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 151 | ····················································································with·connections·in |
| Offset 138, 40 lines modified | Offset 164, 14 lines modified | ||
| 138 | ····················································································flood·condition·is | 164 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 165 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 166 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 167 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 168 | ····················································································servicing·valid |
| 143 | ····················································································connection | 169 | ····················································································connection |
| 144 | ····················································································requests. | 170 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 156 | ····················································································processes·on | ||
| 157 | ····················································································machine·and·is | ||
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 160 | ····················································································system.·The | ||
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network·traffic | ||
| 165 | ····················································································should·be·seen,·all | ||
| 166 | ····················································································other·interfaces | ||
| 167 | ····················································································should·ignore | ||
| 168 | ····················································································traffic·on·this | ||
| 169 | ····················································································network·as·an·anti- | ||
| Max diff block lines reached; 487337/499939 bytes (97.48%) of diff not shown. | |||
| Offset 63, 273 lines modified | Offset 63, 273 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | |||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 000004 | 00000450:·3c74·643e·496e·7374·616c·6c20·5041·4520··<td>Install·PAE· | ||
| 00000460:·4b65·726e·656c·206f·6e20·5375·7070·6f72··Kernel·on·Suppor | |||
| 00000470:·7465·6420·3332·2d62·6974·2078·3836·2053··ted·32-bit·x86·S | |||
| 00000480:·7973·7465·6d73·3c2f·7464·3e0a·2020·2020··ystems</td>.···· | |||
| 00000490:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 000004a0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 000004b0:·5379·7374·656d·7320·7468·6174·2061·7265··Systems·that·are | |||
| 000004c0:·2075·7369·6e67·2074·6865·2036·342d·6269···using·the·64-bi | |||
| 000004d0:·7420·7838·3620·6b65·726e·656c·2070·6163··t·x86·kernel·pac | |||
| 000004e0:·6b61·6765·0a64·6f20·6e6f·7420·6e65·6564··kage.do·not·need | |||
| 000004f0:·2074·6f20·696e·7374·616c·6c20·7468·6520···to·install·the· | |||
| 00000500:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 00000510:·6765·2062·6563·6175·7365·2074·6865·2036··ge·because·the·6 | |||
| 00000520:·342d·6269·740a·7838·3620·6b65·726e·656c··4-bit.x86·kernel | |||
| 00000530:·2061·6c72·6561·6479·2069·6e63·6c75·6465···already·include | |||
| 00000540:·7320·7468·6973·2073·7570·706f·7274·2e20··s·this·support.· | |||
| 00000550:·486f·7765·7665·722c·2069·6620·7468·6520··However,·if·the· | |||
| 00000560:·7379·7374·656d·2069·730a·3332·2d62·6974··system·is.32-bit | |||
| 00000570:·2061·6e64·2061·6c73·6f20·7375·7070·6f72···and·also·suppor | |||
| 00000580:·7473·2074·6865·2050·4145·2061·6e64·204e··ts·the·PAE·and·N | |||
| 00000590:·5820·6665·6174·7572·6573·2061·730a·6465··X·features·as.de | |||
| 000005a0:·7465·726d·696e·6564·2069·6e20·7468·6520··termined·in·the· | |||
| 000005b0:·7072·6576·696f·7573·2073·6563·7469·6f6e··previous·section | |||
| 000005c0:·2c20·7468·6520·6b65·726e·656c·2d50·4145··,·the·kernel-PAE | |||
| 000005d0:·2070·6163·6b61·6765·2073·686f·756c·640a···package·should. | |||
| 000005e0:·6265·2069·6e73·7461·6c6c·6564·2074·6f20··be·installed·to· | |||
| 000005f0:·656e·6162·6c65·2058·4420·6f72·204e·5820··enable·XD·or·NX· | |||
| 00000600:·7375·7070·6f72·742e·0a54·6865·203c·636f··support..The·<co | |||
| 00000610:·6465·3e6b·6572·6e65·6c2d·5041·453c·2f63··de>kernel-PAE</c | |||
| 00000620:·6f64·653e·2070·6163·6b61·6765·2063·616e··ode>·package·can | |||
| 00000630:·2062·6520·696e·7374·616c·6c65·6420·7769···be·installed·wi | |||
| 00000640:·7468·2074·6865·2066·6f6c·6c6f·7769·6e67··th·the·following | |||
| 00000650:·2063·6f6d·6d61·6e64·3a0a·3c70·7265·3e0a···command:.<pre>. | |||
| 00000660:·2420·7375·646f·2079·756d·2069·6e73·7461··$·sudo·yum·insta | |||
| 00000670:·6c6c·206b·6572·6e65·6c2d·5041·453c·2f70··ll·kernel-PAE</p | |||
| 00000680:·7265·3e0a·5468·6520·696e·7374·616c·6c61··re>.The·installa | |||
| 00000690:·7469·6f6e·2070·726f·6365·7373·2073·686f··tion·process·sho | |||
| 000006a0:·756c·6420·616c·736f·2068·6176·6520·636f··uld·also·have·co | |||
| 000006b0:·6e66·6967·7572·6564·2074·6865·0a62·6f6f··nfigured·the.boo | |||
| 000006c0:·746c·6f61·6465·7220·746f·206c·6f61·6420··tloader·to·load· | |||
| 000006d0:·7468·6520·6e65·7720·6b65·726e·656c·2061··the·new·kernel·a | |||
| 000006e0:·7420·626f·6f74·2e20·5665·7269·6679·2074··t·boot.·Verify·t | |||
| 000006f0:·6869·7320·6166·7465·7220·7265·626f·6f74··his·after·reboot | |||
| 00000700:·0a61·6e64·206d·6f64·6966·7920·3c74·743e··.and·modify·<tt> | |||
| 00000710:·2f65·7463·2f64·6566·6175·6c74·2f67·7275··/etc/default/gru | |||
| 00000720:·623c·2f74·743e·2069·6620·6e65·6365·7373··b</tt>·if·necess | |||
| 00000730:·6172·792e·0a20·2020·2020·203c·2f74·643e··ary..······</td> | |||
| 00000 | 00000740:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000 | 00000750:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000760:·2020·2020·204f·6e20·3332·2d62·6974·2073·······On·32-bit·s | |||
| 00000770:·7973·7465·6d73·2074·6861·7420·7375·7070··ystems·that·supp | |||
| 00000780:·6f72·7420·7468·6520·5844·206f·7220·4e58··ort·the·XD·or·NX | |||
| 00000790:·2062·6974·2c20·7468·6520·7665·6e64·6f72···bit,·the·vendor | |||
| 000007a0:·2d73·7570·706c·6965·640a·5041·4520·6b65··-supplied.PAE·ke | |||
| 000007b0:·726e·656c·2069·7320·7265·7175·6972·6564··rnel·is·required | |||
| 000007c0:·2074·6f20·656e·6162·6c65·2065·6974·6865···to·enable·eithe | |||
| 000007d0:·7220·4578·6563·7574·6520·4469·7361·626c··r·Execute·Disabl | |||
| 000007e0:·6520·2858·4429·206f·7220·4e6f·2045·7865··e·(XD)·or·No·Exe | |||
| 000007f0:·6375·7465·2028·4e58·2920·7375·7070·6f72··cute·(NX)·suppor | |||
| 00000800:·742e·0a20·2020·2020·203c·2f74·643e·0a20··t..······</td>.· | |||
| 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | |||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | |||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | |||
| 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | |||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005c0:·7320·6e6f·7420·6469·7361·626c·6564·2062··s·not·disabled·b | |||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 000006a0:·2074·6f20·7570·6461·7465·2063·6f6d·6d61···to·update·comma | |||
| 000006b0:·6e64·206c·696e·6520·666f·7220·616c·7265··nd·line·for·alre | |||
| 000006c0:·6164·7920·696e·7374·616c·6c65·6420·6b65··ady·installed·ke | |||
| 000006d0:·726e·656c·733a·0a3c·7072·653e·2320·6772··rnels:.<pre>#·gr | |||
| 000006e0:·7562·6279·202d·2d75·7064·6174·652d·6b65··ubby·--update-ke | |||
| 000006f0:·726e·656c·3d41·4c4c·202d·2d72·656d·6f76··rnel=ALL·--remov | |||
| 00000700:·652d·6172·6773·3d22·6e6f·736d·6170·223c··e-args="nosmap"< | |||
| 00000710:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 00000720:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000730:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000740:·2020·2020·2020·4469·7361·626c·696e·6720········Disabling· | |||
| 00000750:·534d·4150·2063·616e·2066·6163·696c·6974··SMAP·can·facilit | |||
| 00000760:·6174·6520·6578·706c·6f69·7461·7469·6f6e··ate·exploitation | |||
| 00000770:·206f·6620·7675·6c6e·6572·6162·696c·6974···of·vulnerabilit | |||
| 00000780:·6965·7320·6361·7573·6564·2062·7920·756e··ies·caused·by·un | |||
| 00000790:·696e·7465·6e64·6564·2061·6363·6573·7320··intended·access· | |||
| 000007a0:·616e·640a·6d61·6e69·7075·6c61·7469·6f6e··and.manipulation | |||
| 000007b0:·206f·6620·6461·7461·2069·6e20·7468·6520···of·data·in·the· | |||
| 000007c0:·7573·6572·2073·7061·6365·2e0a·2020·2020··user·space..···· | |||
| 00000 | 00000810:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 000007e0:·3e0a·2020·2020·3c74·723e·0a20·2020·2020··>.····<tr>.····· | |||
| 000007f0:·203c·7464·3e52·313c·2f74·643e·0a20·2020···<td>R1</td>.··· | |||
| 00000800:·2020·203c·7464·3e49·6e73·7461·6c6c·2074·····<td>Install·t | |||
| 00000810:·6865·2064·7261·6375·742d·6669·7073·2d61··he·dracut-fips-a | |||
| 00000820:· | 00000820:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | ||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·643e·5072··td>.······<td>Pr | |||
| Max diff block lines reached; 2920976/2957292 bytes (98.77%) of diff not shown. | |||
| Offset 1, 45 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 8 | 2 | 8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 19 | ···········································································Use·of·weak·or·untested·encryption | ||
| 20 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 21 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 22 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 23 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 24 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 25 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 26 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 27 | ···········································································validated. | ||
| 28 | ···········································································Use·of·a·64-bit·operating·system | ||
| 29 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 30 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 31 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 32 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 33 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 34 | ···········································································bits. | ||
| 35 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 3 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 36 | ······························package·do·not·need·to·install·the·kernel- | 4 | ······························package·do·not·need·to·install·the·kernel- |
| 37 | ······························PAE·package·because·the·64-bit·x86·kernel | 5 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 38 | ······························already·includes·this·support.·However,·if | 6 | ······························already·includes·this·support.·However,·if |
| 39 | ······························the·system·is·32-bit·and·also·supports·the | 7 | ······························the·system·is·32-bit·and·also·supports·the |
| 40 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 8 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 41 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 9 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 47, 14 lines modified | Offset 15, 21 lines modified | ||
| 47 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 15 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 48 | ······························installed·with·the·following·command:········(NX)·support. | 16 | ······························installed·with·the·following·command:········(NX)·support. |
| 49 | ······························$·sudo·yum·install·kernel-PAE | 17 | ······························$·sudo·yum·install·kernel-PAE |
| 50 | ······························The·installation·process·should·also·have | 18 | ······························The·installation·process·should·also·have |
| 51 | ······························configured·the·bootloader·to·load·the·new | 19 | ······························configured·the·bootloader·to·load·the·new |
| 52 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 20 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 53 | ······························modify·/etc/default/grub·if·necessary. | 21 | ······························modify·/etc/default/grub·if·necessary. |
| 22 | ···········································································Use·of·a·64-bit·operating·system | ||
| 23 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 24 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 25 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 26 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 27 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 28 | ···········································································bits. | ||
| 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 29 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 55 | ······························mode·from·executing·user·space·code,·it·is | 30 | ······························mode·from·executing·user·space·code,·it·is |
| 56 | ······························enabled·by·default·since·Linux·kernel·3.0. | 31 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 57 | ······························But·it·could·be·disabled·through·kernel·boot | 32 | ······························But·it·could·be·disabled·through·kernel·boot |
| 58 | ······························parameters.·Ensure·that·Supervisor·Mode | 33 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 34 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 35 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 62, 14 lines modified | Offset 37, 39 lines modified | ||
| 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 37 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 38 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 64 | ······························argument·nosmep.·Run·the·following·command | 39 | ······························argument·nosmep.·Run·the·following·command |
| 65 | ······························to·update·command·line·for·already·installed | 40 | ······························to·update·command·line·for·already·installed |
| 66 | ······························kernels: | 41 | ······························kernels: |
| 67 | ······························#·grubby·--update-kernel=ALL·--remove- | 42 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 68 | ······························args="nosmep" | 43 | ······························args="nosmep" |
| 44 | ···········································································Use·of·weak·or·untested·encryption | ||
| 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 51 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 52 | ···········································································validated. | ||
| 53 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 54 | ······························mode·from·unintentionally·reading/writing | ||
| 55 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 56 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 57 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 58 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 59 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 60 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 61 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 63 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 64 | ······························argument·nosmap.·Run·the·following·command | ||
| 65 | ······························to·update·command·line·for·already·installed | ||
| 66 | ······························kernels: | ||
| 67 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 68 | ······························args="nosmap" | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 14 lines modified | Offset 99, 86 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························Microarchitectural·Data·Sampling·(MDS)·is·a | ||
| 107 | ······························hardware·vulnerability·which·allows | ||
| 108 | ······························unprivileged·speculative·access·to·data | ||
| 109 | ······························which·is·available·in·various·CPU·internal | ||
| 110 | ······························buffers.·When·performing·store,·load,·L1 | ||
| 111 | ······························refill·operations,·processors·write·data | ||
| 112 | ······························into·temporary·microarchitectural·structures | ||
| 113 | ······························(buffers),·and·the·data·in·the·buffer·can·be | ||
| 114 | ······························forwarded·to·load·operations·as·an | ||
| 115 | ······························optimization.·Under·certain·conditions,·data | ||
| 116 | ······························unrelated·to·the·load·operations·can·be | ||
| 117 | ······························speculatively·forwarded·from·the·buffers·to | ||
| Max diff block lines reached; 656998/672457 bytes (97.70%) of diff not shown. | |||
| Offset 41, 30 lines modified | Offset 41, 78 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 48 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········If·an·account·is·configured·for·password·authentication | ||
| 51 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 52 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 53 | 50 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | |
| 51 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 52 | their·UID·changed. | ||
| 53 | <br·/> | ||
| 54 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 55 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 56 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 57 | assigned. | ||
| 58 | ······</td> | ||
| 59 | ······<td·xml:lang="en-US"> | ||
| 60 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 61 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 62 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 63 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 64 | access·to·root·privileges·in·an·accountable·manner. | ||
| 65 | ······</td> | ||
| 66 | ····</tr> | ||
| 67 | ····<tr> | ||
| 68 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 69 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 70 | ······<td·xml:lang="en-US"> | ||
| 71 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 72 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 73 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 74 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 75 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 76 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 77 | plain·text·over·the·network.·By·default,·Oracle·Linux·8's | ||
| 78 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 79 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 80 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 81 | file·by·typing·the·following·command: | ||
| 82 | <pre> | ||
| 83 | $·sudo·echo·>·/etc/securetty | ||
| 84 | </pre> | ||
| 85 | ······</td> | ||
| 86 | ······<td·xml:lang="en-US"> | ||
| 87 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 88 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 89 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 90 | and·FISMA·Moderate·systems. | ||
| 91 | ······</td> | ||
| 92 | ····</tr> | ||
| 93 | ····<tr> | ||
| 94 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 95 | ······<td>Disable·SSH·Root·Login</td> | ||
| 96 | ······<td·xml:lang="en-US"> | ||
| 97 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 98 | system·directly·over·a·network. | ||
| 99 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 54 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 55 | <tt>/etc/pam.d/password-auth</tt> | ||
| 56 | 100 | <tt>/etc/ssh/sshd_config</tt>: | |
| 101 | <pre>PermitRootLogin·no</pre> | ||
| 57 | ······</td> | 102 | ······</td> |
| 58 | ······<td·xml:lang="en-US"> | 103 | ······<td·xml:lang="en-US"> |
| 59 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 60 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 61 | 104 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 105 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 106 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 107 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 108 | direct·attack·attempts·on·root's·password. | ||
| 62 | ······</td> | 109 | ······</td> |
| 63 | ····</tr> | 110 | ····</tr> |
| 64 | ····<tr> | 111 | ····<tr> |
| 65 | ······<td>3.1.1</td> | 112 | ······<td>3.1.1</td> |
| 66 | ······<td>Disable·GDM·Automatic·Login</td> | 113 | ······<td>Disable·GDM·Automatic·Login</td> |
| 67 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 68 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | 115 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| Offset 77, 28 lines modified | Offset 125, 63 lines modified | ||
| 77 | ······</td> | 125 | ······</td> |
| 78 | ······<td·xml:lang="en-US"> | 126 | ······<td·xml:lang="en-US"> |
| 79 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 127 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 80 | system·security. | 128 | system·security. |
| 81 | ······</td> | 129 | ······</td> |
| 82 | ····</tr> | 130 | ····</tr> |
| 83 | ····<tr> | 131 | ····<tr> |
| 84 | ······<td>3.1.1<br/>3. | 132 | ······<td>3.1.1<br/>3.1.5</td> |
| 85 | ······<td>Re | 133 | ······<td>Restrict·Virtual·Console·Root·Logins</td> |
| 86 | ······<td·xml:lang="en-US"> | 134 | ······<td·xml:lang="en-US"> |
| 87 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 88 | method,·providing·a·single·user·root·access·to·the·system | ||
| 89 | during·a·failed·boot·sequence. | ||
| 90 | <br·/><br·/> | ||
| 91 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 92 | 135 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | |
| 136 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 137 | <pre>vc/1 | ||
| 138 | vc/2 | ||
| 139 | vc/3 | ||
| 140 | vc/4</pre> | ||
| 93 | ······</td> | 141 | ······</td> |
| 94 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 95 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 96 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 97 | 143 | ········Preventing·direct·root·login·to·virtual·console·devices | |
| 144 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 145 | using·the·root·account. | ||
| 146 | ······</td> | ||
| 147 | ····</tr> | ||
| 148 | ····<tr> | ||
| 149 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 150 | ······<td>Restrict·Serial·Port·Root·Logins</td> | ||
| 151 | ······<td·xml:lang="en-US"> | ||
| 152 | ········To·restrict·root·logins·on·serial·ports, | ||
| 153 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 154 | <pre>ttyS0 | ||
| 155 | ttyS1</pre> | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| Max diff block lines reached; 458755/465227 bytes (98.61%) of diff not shown. | |||
| Offset 4165, 15 lines modified | Offset 4165, 15 lines modified | ||
| 4165 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4165 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4166 | ··</td> | 4166 | ··</td> |
| 4167 | ··<td·xml:lang="en-US"> | 4167 | ··<td·xml:lang="en-US"> |
| 4168 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4168 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4169 | time-based·limit,·effects·of·potential·attacks·against | 4169 | time-based·limit,·effects·of·potential·attacks·against |
| 4170 | encryption·keys·are·limited. | 4170 | encryption·keys·are·limited. |
| 4171 | ··</td> | 4171 | ··</td> |
| 4172 | ··<td>var_rekey_limit_ | 4172 | ··<td>var_rekey_limit_time=1hour<br/>var_rekey_limit_size=1G</td> |
| 4173 | </tr> | 4173 | </tr> |
| 4174 | <tr> | 4174 | <tr> |
| 4175 | ··<td></td> | 4175 | ··<td></td> |
| 4176 | ··<td>N/A</td> | 4176 | ··<td>N/A</td> |
| 4177 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4177 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4178 | ··<td·xml:lang="en-US"> | 4178 | ··<td·xml:lang="en-US"> |
| 4179 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4179 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3361, 16 lines modified | Offset 3361, 16 lines modified | ||
| 3361 | ··················································································································generator·used·by | 3361 | ··················································································································generator·used·by |
| 3362 | ··················································································································SSH·would·be·known | 3362 | ··················································································································SSH·would·be·known |
| 3363 | ··················································································································to·potential | 3363 | ··················································································································to·potential |
| 3364 | ··················································································································attackers. | 3364 | ··················································································································attackers. |
| 3365 | ··················································································································By·decreasing·the | 3365 | ··················································································································By·decreasing·the |
| 3366 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3366 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3367 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3367 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3368 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3368 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_time=1hour |
| 3369 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3369 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_size=1G |
| 3370 | ·························RekeyLimit·1G·1hour······································································potential·attacks | 3370 | ·························RekeyLimit·1G·1hour······································································potential·attacks |
| 3371 | ··················································································································against·encryption | 3371 | ··················································································································against·encryption |
| 3372 | ··················································································································keys·are·limited. | 3372 | ··················································································································keys·are·limited. |
| 3373 | ··················································································································SSH·implementation | 3373 | ··················································································································SSH·implementation |
| 3374 | ··················································································································in·Oracle·Linux·8 | 3374 | ··················································································································in·Oracle·Linux·8 |
| 3375 | ··················································································································uses·the·openssl | 3375 | ··················································································································uses·the·openssl |
| 3376 | ··················································································································library,·which | 3376 | ··················································································································library,·which |
| Offset 64, 14334 lines modified | Offset 64, 14334 lines modified | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | Diff chunk too large, falling back to line-by-line diff (3537 lines added, 3537 lines removed) | |
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e4 | 00000460:·6329·3c62·722f·3e43·4d2d·3628·6129·3c2f··c)<br/>CM-6(a)</ | ||
| 00000470:·7 | 00000470:·7464·3e0a·2020·2020·2020·3c74·643e·5265··td>.······<td>Re | ||
| 00000480:· | 00000480:·636f·7264·2045·7665·6e74·7320·7468·6174··cord·Events·that | ||
| 00000490:·20 | 00000490:·204d·6f64·6966·7920·7468·6520·5379·7374···Modify·the·Syst | ||
| 000004a0:· | 000004a0:·656d·2773·2044·6973·6372·6574·696f·6e61··em's·Discretiona | ||
| 000004b0:·7 | 000004b0:·7279·2041·6363·6573·7320·436f·6e74·726f··ry·Access·Contro | ||
| 000004c0:·6c | 000004c0:·6c73·202d·2063·686d·6f64·3c2f·7464·3e0a··ls·-·chmod</td>. | ||
| 000004d0:·20 | 000004d0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000004e0:· | 000004e0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000004f0:·2 | 000004f0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| 00000500:·2 | 00000500:·2c20·7468·6520·6175·6469·7420·7379·7374··,·the·audit·syst | ||
| 00000510:·6 | 00000510:·656d·2073·686f·756c·6420·636f·6c6c·6563··em·should·collec | ||
| 00000520:·7 | 00000520:·7420·6669·6c65·2070·6572·6d69·7373·696f··t·file·permissio | ||
| 00000530:·6 | 00000530:·6e0a·6368·616e·6765·7320·666f·7220·616c··n.changes·for·al | ||
| 00000540:· | 00000540:·6c20·7573·6572·7320·616e·6420·726f·6f74··l·users·and·root | ||
| 00000550:· | 00000550:·2e20·4966·2074·6865·203c·7474·3e61·7564··.·If·the·<tt>aud | ||
| 00000560:· | 00000560:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 00000570:·6 | 00000570:·6973·2063·6f6e·6669·6775·7265·6420·746f··is·configured·to | ||
| 00000580:· | 00000580:·0a75·7365·2074·6865·203c·7474·3e61·7567··.use·the·<tt>aug | ||
| 00000590:·6 | 00000590:·656e·7275·6c65·733c·2f74·743e·2070·726f··enrules</tt>·pro | ||
| 000005a0:·6 | 000005a0:·6772·616d·2074·6f20·7265·6164·2061·7564··gram·to·read·aud | ||
| 000005b0:· | 000005b0:·6974·2072·756c·6573·2064·7572·696e·6720··it·rules·during· | ||
| 000005c0:·6 | 000005c0:·6461·656d·6f6e·2073·7461·7274·7570·0a28··daemon·startup.( | ||
| 000005d0:·6 | 000005d0:·7468·6520·6465·6661·756c·7429·2c20·6164··the·default),·ad | ||
| 000005e0:· | 000005e0:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 000005f0:·6 | 000005f0:·6c69·6e65·2074·6f20·6120·6669·6c65·2077··line·to·a·file·w | ||
| 00000600:·6 | 00000600:·6974·6820·7375·6666·6978·203c·7474·3e2e··ith·suffix·<tt>. | ||
| 00000610:· | 00000610:·7275·6c65·733c·2f74·743e·2069·6e0a·7468··rules</tt>·in.th | ||
| 00000620:·6 | 00000620:·6520·6469·7265·6374·6f72·7920·3c74·743e··e·directory·<tt> | ||
| 00000630:· | 00000630:·2f65·7463·2f61·7564·6974·2f72·756c·6573··/etc/audit/rules | ||
| 00000640:· | 00000640:·2e64·3c2f·7474·3e3a·0a3c·7072·653e·2d61··.d</tt>:.<pre>-a | ||
| 00000650:· | 00000650:·2061·6c77·6179·732c·6578·6974·202d·4620···always,exit·-F· | ||
| 00000660:· | 00000660:·6172·6368·3d62·3332·202d·5320·6368·6d6f··arch=b32·-S·chmo | ||
| 00000670:·6 | 00000670:·6420·2d46·2061·7569·6426·6774·3b3d·3130··d·-F·auid>=10 | ||
| 00000680:·202d·4620· | 00000680:·3030·202d·4620·6175·6964·213d·756e·7365··00·-F·auid!=unse | ||
| 00000690:· | 00000690:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | ||
| 000006a0:· | 000006a0:·643c·2f70·7265·3e0a·4966·2074·6865·2073··d</pre>.If·the·s | ||
| 000006b0:· | 000006b0:·7973·7465·6d20·6973·2036·3420·6269·7420··ystem·is·64·bit· | ||
| 000006c0:· | 000006c0:·7468·656e·2061·6c73·6f20·6164·6420·7468··then·also·add·th | ||
| 000006d0:·65 | 000006d0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 000006e0:· | 000006e0:·3a0a·3c70·7265·3e2d·6120·616c·7761·7973··:.<pre>-a·always | ||
| 000006f0:· | 000006f0:·2c65·7869·7420·2d46·2061·7263·683d·6236··,exit·-F·arch=b6 | ||
| 00000700:· | 00000700:·3420·2d53·2063·686d·6f64·202d·4620·6175··4·-S·chmod·-F·au | ||
| 00000710:·6 | 00000710:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000720:·7 | 00000720:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 00000730:· | 00000730:·793d·7065·726d·5f6d·6f64·3c2f·7072·653e··y=perm_mod</pre> | ||
| 00000740:· | 00000740:·0a49·6620·7468·6520·3c74·743e·6175·6469··.If·the·<tt>audi | ||
| 00000750:·6 | 00000750:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000760:· | 00000760:·7320·636f·6e66·6967·7572·6564·2074·6f20··s·configured·to· | ||
| 00000770:· | 00000770:·7573·6520·7468·6520·3c74·743e·6175·6469··use·the·<tt>audi | ||
| 00000780:·6 | 00000780:·7463·746c·3c2f·7474·3e0a·7574·696c·6974··tctl</tt>.utilit | ||
| 00000790:·7 | 00000790:·7920·746f·2072·6561·6420·6175·6469·7420··y·to·read·audit· | ||
| 000007a0:· | 000007a0:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 000007b0:· | 000007b0:·6d6f·6e20·7374·6172·7475·702c·2061·6464··mon·startup,·add | ||
| 000007c0:·2 | 000007c0:·2074·6865·2066·6f6c·6c6f·7769·6e67·206c···the·following·l | ||
| 000007d0:· | 000007d0:·696e·6520·746f·0a3c·7474·3e2f·6574·632f··ine·to.<tt>/etc/ | ||
| 000007e0:· | 000007e0:·6175·6469·742f·6175·6469·742e·7275·6c65··audit/audit.rule | ||
| 000007f0:·7 | 000007f0:·733c·2f74·743e·2066·696c·653a·0a3c·7072··s</tt>·file:.<pr | ||
| 00000800:·6 | 00000800:·653e·2d61·2061·6c77·6179·732c·6578·6974··e>-a·always,exit | ||
| 00000810:· | 00000810:·202d·4620·6172·6368·3d62·3332·202d·5320···-F·arch=b32·-S· | ||
| 00000820:· | 00000820:·6368·6d6f·6420·2d46·2061·7569·6426·6774··chmod·-F·auid> | ||
| 00000830:·3 | 00000830:·3b3d·3130·3030·202d·4620·6175·6964·213d··;=1000·-F·auid!= | ||
| 00000840:· | 00000840:·756e·7365·7420·2d46·206b·6579·3d70·6572··unset·-F·key=per | ||
| 00000850:· | 00000850:·6d5f·6d6f·643c·2f70·7265·3e0a·4966·2074··m_mod</pre>.If·t | ||
| 00000860:· | 00000860:·6865·2073·7973·7465·6d20·6973·2036·3420··he·system·is·64· | ||
| 00000870:·7 | 00000870:·6269·7420·7468·656e·2061·6c73·6f20·6164··bit·then·also·ad | ||
| 00000880:· | 00000880:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 00000890:· | 00000890:·6c69·6e65·3a0a·3c70·7265·3e2d·6120·616c··line:.<pre>-a·al | ||
| 000008a0:·7 | 000008a0:·7761·7973·2c65·7869·7420·2d46·2061·7263··ways,exit·-F·arc | ||
| 000008b0:·6 | 000008b0:·683d·6236·3420·2d53·2063·686d·6f64·202d··h=b64·-S·chmod·- | ||
| 000008c0:· | 000008c0:·4620·6175·6964·2667·743b·3d31·3030·3020··F·auid>=1000· | ||
| 000008d0:· | 000008d0:·2d46·2061·7569·6421·3d75·6e73·6574·202d··-F·auid!=unset·- | ||
| 000008e0:· | 000008e0:·4620·6b65·793d·7065·726d·5f6d·6f64·3c2f··F·key=perm_mod</ | ||
| 000008f0:· | 000008f0:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 00000900:· | 00000900:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000910:· | 00000910:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000920:· | 00000920:·2020·2020·2054·6865·2063·6861·6e67·696e·······The·changin | ||
| 00000930:·6 | 00000930:·6720·6f66·2066·696c·6520·7065·726d·6973··g·of·file·permis | ||
| 00000940:·7 | 00000940:·7369·6f6e·7320·636f·756c·6420·696e·6469··sions·could·indi | ||
| 00000950:·6 | 00000950:·6361·7465·2074·6861·7420·6120·7573·6572··cate·that·a·user | ||
| 00000960:· | 00000960:·2069·7320·6174·7465·6d70·7469·6e67·2074···is·attempting·t | ||
| 00000970:·6 | 00000970:·6f0a·6761·696e·2061·6363·6573·7320·746f··o.gain·access·to | ||
| 00000980:· | 00000980:·2069·6e66·6f72·6d61·7469·6f6e·2074·6861···information·tha | ||
| 00000990:· | 00000990:·7420·776f·756c·6420·6f74·6865·7277·6973··t·would·otherwis | ||
| 000009a0:· | 000009a0:·6520·6265·2064·6973·616c·6c6f·7765·642e··e·be·disallowed. | ||
| 000009b0:· | 000009b0:·2041·7564·6974·696e·6720·4441·4320·6d6f···Auditing·DAC·mo | ||
| 000009c0:·6 | 000009c0:·6469·6669·6361·7469·6f6e·730a·6361·6e20··difications.can· | ||
| 000009d0:· | 000009d0:·6661·6369·6c69·7461·7465·2074·6865·2069··facilitate·the·i | ||
| 000009e0:·6 | 000009e0:·6465·6e74·6966·6963·6174·696f·6e20·6f66··dentification·of | ||
| 000009f0:· | 000009f0:·2070·6174·7465·726e·7320·6f66·2061·6275···patterns·of·abu | ||
| 00000a00:· | 00000a00:·7365·2061·6d6f·6e67·2062·6f74·6820·6175··se·among·both·au | ||
| 00000a10:· | 00000a10:·7468·6f72·697a·6564·2061·6e64·0a75·6e61··thorized·and.una | ||
| 00000a20:· | 00000a20:·7574·686f·7269·7a65·6420·7573·6572·732e··uthorized·users. | ||
| 00000a30:· | 00000a30:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | ||
| 00000a40:· | 00000a40:·203c·2f74·723e·0a20·2020·203c·7472·3e0a···</tr>.····<tr>. | ||
| 00000a50:· | 00000a50:·2020·2020·2020·3c74·643e·4155·2d32·2864········<td>AU-2(d | ||
| 00000a60:· | 00000a60:·293c·6272·2f3e·4155·2d31·3228·6329·3c62··)<br/>AU-12(c)<b | ||
| 00000a70:·2 | 00000a70:·722f·3e41·432d·3628·3929·3c62·722f·3e43··r/>AC-6(9)<br/>C | ||
| 00000a80:· | 00000a80:·4d2d·3628·6129·3c2f·7464·3e0a·2020·2020··M-6(a)</td>.···· | ||
| 00000a90:·20 | 00000a90:·2020·3c74·643e·5265·636f·7264·2041·7474····<td>Record·Att | ||
| 00000aa0:·6 | 00000aa0:·656d·7074·7320·746f·2041·6c74·6572·204c··empts·to·Alter·L | ||
| 00000ab0:· | 00000ab0:·6f67·6f6e·2061·6e64·204c·6f67·6f75·7420··ogon·and·Logout· | ||
| 00000ac0:· | 00000ac0:·4576·656e·7473·202d·2074·616c·6c79·6c6f··Events·-·tallylo | ||
| 00000ad0:·7464 | 00000ad0:·673c·2f74·643e·0a20·2020·2020·203c·7464··g</td>.······<td | ||
| 00000ae0:·20 | 00000ae0:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00000af0:· | 00000af0:·223e·0a20·2020·2020·2020·2054·6865·2061··">.········The·a | ||
| 00000b00:· | 00000b00:·7564·6974·2073·7973·7465·6d20·616c·7265··udit·system·alre | ||
| 00000b10:· | 00000b10:·6164·7920·636f·6c6c·6563·7473·206c·6f67··ady·collects·log | ||
| 00000b20:·6 | 00000b20:·696e·2069·6e66·6f72·6d61·7469·6f6e·2066··in·information·f | ||
| 00000b30:· | 00000b30:·6f72·2061·6c6c·2075·7365·7273·0a61·6e64··or·all·users.and | ||
| 00000b40:·6 | 00000b40:·2072·6f6f·742e·2049·6620·7468·6520·3c74···root.·If·the·<t | ||
| 00000b50:· | 00000b50:·743e·6175·6469·7464·3c2f·7474·3e20·6461··t>auditd</tt>·da | ||
| 00000b60:·6 | 00000b60:·656d·6f6e·2069·7320·636f·6e66·6967·7572··emon·is·configur | ||
| 00000b70:· | 00000b70:·6564·2074·6f20·7573·6520·7468·650a·3c74··ed·to·use·the.<t | ||
| 00000b80:· | 00000b80:·743e·6175·6765·6e72·756c·6573·3c2f·7474··t>augenrules</tt | ||
| 00000b90:· | 00000b90:·3e20·7072·6f67·7261·6d20·746f·2072·6561··>·program·to·rea | ||
| 00000ba0:· | 00000ba0:·6420·6175·6469·7420·7275·6c65·7320·6475··d·audit·rules·du | ||
| 00000bb0:· | 00000bb0:·7269·6e67·2064·6165·6d6f·6e20·7374·6172··ring·daemon·star | ||
| 00000bc0:· | 00000bc0:·7475·7020·2874·6865·0a64·6566·6175·6c74··tup·(the.default | ||
| Max diff block lines reached; 6809352/7298036 bytes (93.30%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 26 lines modified | Offset 157, 26 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 167 | 166 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | network. | ||
| 168 | ······</td> | 169 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 171 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 172 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | 180 | ······<td>Install·iptables·Package</td> |
| 181 | ······<td·xml:lang="en-US"> | 181 | ······<td·xml:lang="en-US"> |
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| Offset 187, 26 lines modified | Offset 187, 26 lines modified | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering |
| 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP |
| 189 | masquerading,·etc. | 189 | masquerading,·etc. |
| 190 | ······</td> | 190 | ······</td> |
| 191 | ····</tr> | 191 | ····</tr> |
| 192 | ····<tr> | 192 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 194 | ······<td> | 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 195 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 196 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | network. | ||
| 199 | ······</td> | 198 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 199 | ······<td·xml:lang="en-US"> |
| 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | |
| 201 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 205 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 38 lines modified | Offset 246, 28 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 298927/305509 bytes (97.85%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 14 lines modified | Offset 112, 40 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 121 | ····················································································processes·on | ||
| 122 | ····················································································machine·and·is | ||
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 125 | ····················································································system.·The | ||
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 129 | ····················································································network·traffic | ||
| 130 | ····················································································should·be·seen,·all | ||
| 131 | ····················································································other·interfaces | ||
| 132 | ····················································································should·ignore | ||
| 133 | ····················································································traffic·on·this | ||
| 134 | ····················································································network·as·an·anti- | ||
| 135 | ····················································································spoofing·measure. | ||
| 136 | ····················································································iptables·controls | ||
| 137 | ····················································································the·Linux·kernel | ||
| 138 | ····················································································network·packet | ||
| 139 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 140 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 141 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 142 | ····················································································set·up·firewalls | ||
| 143 | ····················································································and·IP | ||
| 144 | ····················································································masquerading,·etc. | ||
| 119 | ····················································································A·TCP·SYN·flood | 145 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 146 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 147 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 148 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 149 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 150 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 151 | ····················································································with·connections·in |
| Offset 138, 40 lines modified | Offset 164, 14 lines modified | ||
| 138 | ····················································································flood·condition·is | 164 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 165 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 166 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 167 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 168 | ····················································································servicing·valid |
| 143 | ····················································································connection | 169 | ····················································································connection |
| 144 | ····················································································requests. | 170 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 156 | ····················································································processes·on | ||
| 157 | ····················································································machine·and·is | ||
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 160 | ····················································································system.·The | ||
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network·traffic | ||
| 165 | ····················································································should·be·seen,·all | ||
| 166 | ····················································································other·interfaces | ||
| 167 | ····················································································should·ignore | ||
| 168 | ····················································································traffic·on·this | ||
| 169 | ····················································································network·as·an·anti- | ||
| Max diff block lines reached; 489276/501878 bytes (97.49%) of diff not shown. | |||
| Offset 66, 14239 lines modified | Offset 66, 14239 lines modified | ||
| 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | ||
| 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | ||
| 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | ||
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | Diff chunk too large, falling back to line-by-line diff (13558 lines added, 13558 lines removed) | |
| 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000480:·4155·2d31·3228·6329·3c62·722f·3e4 | 00000480:·4155·2d31·3228·6329·3c62·722f·3e43·4d2d··AU-12(c)<br/>CM- | ||
| 00000490:·3628· | 00000490:·3628·6129·3c2f·7464·3e0a·2020·2020·2020··6(a)</td>.······ | ||
| 000004a0:·3c | 000004a0:·3c74·643e·5265·636f·7264·2045·7665·6e74··<td>Record·Event | ||
| 000004b0:· | 000004b0:·7320·7468·6174·204d·6f64·6966·7920·7468··s·that·Modify·th | ||
| 000004c0:·6 | 000004c0:·6520·5379·7374·656d·2773·2044·6973·6372··e·System's·Discr | ||
| 000004d0:·6 | 000004d0:·6574·696f·6e61·7279·2041·6363·6573·7320··etionary·Access· | ||
| 000004e0:· | 000004e0:·436f·6e74·726f·6c73·202d·2063·686d·6f64··Controls·-·chmod | ||
| 000004f0:· | 000004f0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 00000500:· | 00000500:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| 00000510:·3 | 00000510:·3e0a·2020·2020·2020·2020·4174·2061·206d··>.········At·a·m | ||
| 00000520:· | 00000520:·696e·696d·756d·2c20·7468·6520·6175·6469··inimum,·the·audi | ||
| 00000530:· | 00000530:·7420·7379·7374·656d·2073·686f·756c·6420··t·system·should· | ||
| 00000540:· | 00000540:·636f·6c6c·6563·7420·6669·6c65·2070·6572··collect·file·per | ||
| 00000550:·6 | 00000550:·6d69·7373·696f·6e0a·6368·616e·6765·7320··mission.changes· | ||
| 00000560:·6 | 00000560:·666f·7220·616c·6c20·7573·6572·7320·616e··for·all·users·an | ||
| 00000570:·206 | 00000570:·6420·726f·6f74·2e20·4966·2074·6865·203c··d·root.·If·the·< | ||
| 00000580:· | 00000580:·7474·3e61·7564·6974·643c·2f74·743e·2064··tt>auditd</tt>·d | ||
| 00000590:· | 00000590:·6165·6d6f·6e20·6973·2063·6f6e·6669·6775··aemon·is·configu | ||
| 000005a0:·6 | 000005a0:·7265·6420·746f·0a75·7365·2074·6865·203c··red·to.use·the·< | ||
| 000005b0:· | 000005b0:·7474·3e61·7567·656e·7275·6c65·733c·2f74··tt>augenrules</t | ||
| 000005c0:·207 | 000005c0:·743e·2070·726f·6772·616d·2074·6f20·7265··t>·program·to·re | ||
| 000005d0:·6 | 000005d0:·6164·2061·7564·6974·2072·756c·6573·2064··ad·audit·rules·d | ||
| 000005e0:· | 000005e0:·7572·696e·6720·6461·656d·6f6e·2073·7461··uring·daemon·sta | ||
| 000005f0:· | 000005f0:·7274·7570·0a28·7468·6520·6465·6661·756c··rtup.(the·defaul | ||
| 00000600:· | 00000600:·7429·2c20·6164·6420·7468·6520·666f·6c6c··t),·add·the·foll | ||
| 00000610:· | 00000610:·6f77·696e·6720·6c69·6e65·2074·6f20·6120··owing·line·to·a· | ||
| 00000620:·6 | 00000620:·6669·6c65·2077·6974·6820·7375·6666·6978··file·with·suffix | ||
| 00000630:· | 00000630:·203c·7474·3e2e·7275·6c65·733c·2f74·743e···<tt>.rules</tt> | ||
| 00000640:· | 00000640:·2069·6e0a·7468·6520·6469·7265·6374·6f72···in.the·director | ||
| 00000650:· | 00000650:·7920·3c74·743e·2f65·7463·2f61·7564·6974··y·<tt>/etc/audit | ||
| 00000660:·2f7 | 00000660:·2f72·756c·6573·2e64·3c2f·7474·3e3a·0a3c··/rules.d</tt>:.< | ||
| 00000670:· | 00000670:·7072·653e·2d61·2061·6c77·6179·732c·6578··pre>-a·always,ex | ||
| 00000680:· | 00000680:·6974·202d·4620·6172·6368·3d62·3332·202d··it·-F·arch=b32·- | ||
| 00000690:· | 00000690:·5320·6368·6d6f·6420·2d46·2061·7569·6426··S·chmod·-F·auid& | ||
| 000006a0:·73 | 000006a0:·6774·3b3d·3130·3030·202d·4620·6175·6964··gt;=1000·-F·auid | ||
| 000006b0:· | 000006b0:·213d·756e·7365·7420·2d46·206b·6579·3d70··!=unset·-F·key=p | ||
| 000006c0:· | 000006c0:·6572·6d5f·6d6f·643c·2f70·7265·3e0a·4966··erm_mod</pre>.If | ||
| 000006d0:·266 | 000006d0:·2074·6865·2073·7973·7465·6d20·6973·2036···the·system·is·6 | ||
| 000006e0:· | 000006e0:·3420·6269·7420·7468·656e·2061·6c73·6f20··4·bit·then·also· | ||
| 000006f0:· | 000006f0:·6164·6420·7468·6520·666f·6c6c·6f77·696e··add·the·followin | ||
| 00000700:· | 00000700:·6720·6c69·6e65·3a0a·3c70·7265·3e2d·6120··g·line:.<pre>-a· | ||
| 00000710:· | 00000710:·616c·7761·7973·2c65·7869·7420·2d46·2061··always,exit·-F·a | ||
| 00000720:·7 | 00000720:·7263·683d·6236·3420·2d53·2063·686d·6f64··rch=b64·-S·chmod | ||
| 00000730:· | 00000730:·202d·4620·6175·6964·2667·743b·3d31·3030···-F·auid>=100 | ||
| 00000740:· | 00000740:·3020·2d46·2061·7569·6421·3d75·6e73·6574··0·-F·auid!=unset | ||
| 00000750:· | 00000750:·202d·4620·6b65·793d·7065·726d·5f6d·6f64···-F·key=perm_mod | ||
| 00000760:·7 | 00000760:·3c2f·7072·653e·0a49·6620·7468·6520·3c74··</pre>.If·the·<t | ||
| 00000770:·6 | 00000770:·743e·6175·6469·7464·3c2f·7474·3e20·6461··t>auditd</tt>·da | ||
| 00000780:· | 00000780:·656d·6f6e·2069·7320·636f·6e66·6967·7572··emon·is·configur | ||
| 00000790:·6 | 00000790:·6564·2074·6f20·7573·6520·7468·6520·3c74··ed·to·use·the·<t | ||
| 000007a0:· | 000007a0:·743e·6175·6469·7463·746c·3c2f·7474·3e0a··t>auditctl</tt>. | ||
| 000007b0:· | 000007b0:·7574·696c·6974·7920·746f·2072·6561·6420··utility·to·read· | ||
| 000007c0:· | 000007c0:·6175·6469·7420·7275·6c65·7320·6475·7269··audit·rules·duri | ||
| 000007d0:· | 000007d0:·6e67·2064·6165·6d6f·6e20·7374·6172·7475··ng·daemon·startu | ||
| 000007e0:·7 | 000007e0:·702c·2061·6464·2074·6865·2066·6f6c·6c6f··p,·add·the·follo | ||
| 000007f0:· | 000007f0:·7769·6e67·206c·696e·6520·746f·0a3c·7474··wing·line·to.<tt | ||
| 00000800:· | 00000800:·3e2f·6574·632f·6175·6469·742f·6175·6469··>/etc/audit/audi | ||
| 00000810:· | 00000810:·742e·7275·6c65·733c·2f74·743e·2066·696c··t.rules</tt>·fil | ||
| 00000820:· | 00000820:·653a·0a3c·7072·653e·2d61·2061·6c77·6179··e:.<pre>-a·alway | ||
| 00000830:· | 00000830:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 00000840:· | 00000840:·3332·202d·5320·6368·6d6f·6420·2d46·2061··32·-S·chmod·-F·a | ||
| 00000850:· | 00000850:·7569·6426·6774·3b3d·3130·3030·202d·4620··uid>=1000·-F· | ||
| 00000860:· | 00000860:·6175·6964·213d·756e·7365·7420·2d46·206b··auid!=unset·-F·k | ||
| 00000870:·65 | 00000870:·6579·3d70·6572·6d5f·6d6f·643c·2f70·7265··ey=perm_mod</pre | ||
| 00000880:· | 00000880:·3e0a·4966·2074·6865·2073·7973·7465·6d20··>.If·the·system· | ||
| 00000890:·6 | 00000890:·6973·2036·3420·6269·7420·7468·656e·2061··is·64·bit·then·a | ||
| 000008a0:·6 | 000008a0:·6c73·6f20·6164·6420·7468·6520·666f·6c6c··lso·add·the·foll | ||
| 000008b0:· | 000008b0:·6f77·696e·6720·6c69·6e65·3a0a·3c70·7265··owing·line:.<pre | ||
| 000008c0:· | 000008c0:·3e2d·6120·616c·7761·7973·2c65·7869·7420··>-a·always,exit· | ||
| 000008d0:· | 000008d0:·2d46·2061·7263·683d·6236·3420·2d53·2063··-F·arch=b64·-S·c | ||
| 000008e0:· | 000008e0:·686d·6f64·202d·4620·6175·6964·2667·743b··hmod·-F·auid> | ||
| 000008f0:· | 000008f0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 00000900:·6 | 00000900:·6e73·6574·202d·4620·6b65·793d·7065·726d··nset·-F·key=perm | ||
| 00000910:· | 00000910:·5f6d·6f64·3c2f·7072·653e·0a20·2020·2020··_mod</pre>.····· | ||
| 00000920:· | 00000920:·203c·2f74·643e·0a20·2020·2020·203c·7464···</td>.······<td | ||
| 00000930:· | 00000930:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00000940:· | 00000940:·223e·0a20·2020·2020·2020·2054·6865·2063··">.········The·c | ||
| 00000950:· | 00000950:·6861·6e67·696e·6720·6f66·2066·696c·6520··hanging·of·file· | ||
| 00000960:· | 00000960:·7065·726d·6973·7369·6f6e·7320·636f·756c··permissions·coul | ||
| 00000970:·6 | 00000970:·6420·696e·6469·6361·7465·2074·6861·7420··d·indicate·that· | ||
| 00000980:·6 | 00000980:·6120·7573·6572·2069·7320·6174·7465·6d70··a·user·is·attemp | ||
| 00000990:· | 00000990:·7469·6e67·2074·6f0a·6761·696e·2061·6363··ting·to.gain·acc | ||
| 000009a0:·6 | 000009a0:·6573·7320·746f·2069·6e66·6f72·6d61·7469··ess·to·informati | ||
| 000009b0:·6 | 000009b0:·6f6e·2074·6861·7420·776f·756c·6420·6f74··on·that·would·ot | ||
| 000009c0:· | 000009c0:·6865·7277·6973·6520·6265·2064·6973·616c··herwise·be·disal | ||
| 000009d0:· | 000009d0:·6c6f·7765·642e·2041·7564·6974·696e·6720··lowed.·Auditing· | ||
| 000009e0:· | 000009e0:·4441·4320·6d6f·6469·6669·6361·7469·6f6e··DAC·modification | ||
| 000009f0:·73 | 000009f0:·730a·6361·6e20·6661·6369·6c69·7461·7465··s.can·facilitate | ||
| 00000a00:· | 00000a00:·2074·6865·2069·6465·6e74·6966·6963·6174···the·identificat | ||
| 00000a10:·6 | 00000a10:·696f·6e20·6f66·2070·6174·7465·726e·7320··ion·of·patterns· | ||
| 00000a20:· | 00000a20:·6f66·2061·6275·7365·2061·6d6f·6e67·2062··of·abuse·among·b | ||
| 00000a30:· | 00000a30:·6f74·6820·6175·7468·6f72·697a·6564·2061··oth·authorized·a | ||
| 00000a40:·6 | 00000a40:·6e64·0a75·6e61·7574·686f·7269·7a65·6420··nd.unauthorized· | ||
| 00000a50:·7 | 00000a50:·7573·6572·732e·0a20·2020·2020·203c·2f74··users..······</t | ||
| 00000a60:·6 | 00000a60:·643e·0a20·2020·203c·2f74·723e·0a20·2020··d>.····</tr>.··· | ||
| 00000a70:· | 00000a70:·203c·7472·3e0a·2020·2020·2020·3c74·643e···<tr>.······<td> | ||
| 00000a80:· | 00000a80:·4155·2d32·2864·293c·6272·2f3e·4155·2d31··AU-2(d)<br/>AU-1 | ||
| 00000a90:· | 00000a90:·3228·6329·3c62·722f·3e41·432d·3628·3929··2(c)<br/>AC-6(9) | ||
| 00000aa0:· | 00000aa0:·3c62·722f·3e43·4d2d·3628·6129·3c2f·7464··<br/>CM-6(a)</td | ||
| 00000ab0:· | 00000ab0:·3e0a·2020·2020·2020·3c74·643e·5265·636f··>.······<td>Reco | ||
| 00000ac0:· | 00000ac0:·7264·2041·7474·656d·7074·7320·746f·2041··rd·Attempts·to·A | ||
| 00000ad0:· | 00000ad0:·6c74·6572·204c·6f67·6f6e·2061·6e64·204c··lter·Logon·and·L | ||
| 00000ae0:· | 00000ae0:·6f67·6f75·7420·4576·656e·7473·202d·2074··ogout·Events·-·t | ||
| 00000af0:· | 00000af0:·616c·6c79·6c6f·673c·2f74·643e·0a20·2020··allylog</td>.··· | ||
| 00000b00:· | 00000b00:·2020·203c·7464·2078·6d6c·3a6c·616e·673d·····<td·xml:lang= | ||
| 00000b10:·2 | 00000b10:·2265·6e2d·5553·223e·0a20·2020·2020·2020··"en-US">.······· | ||
| 00000b20:· | 00000b20:·2054·6865·2061·7564·6974·2073·7973·7465···The·audit·syste | ||
| 00000b30:· | 00000b30:·6d20·616c·7265·6164·7920·636f·6c6c·6563··m·already·collec | ||
| 00000b40:· | 00000b40:·7473·206c·6f67·696e·2069·6e66·6f72·6d61··ts·login·informa | ||
| 00000b50:·746 | 00000b50:·7469·6f6e·2066·6f72·2061·6c6c·2075·7365··tion·for·all·use | ||
| 00000b60:· | 00000b60:·7273·0a61·6e64·2072·6f6f·742e·2049·6620··rs.and·root.·If· | ||
| 00000b70:· | 00000b70:·7468·6520·3c74·743e·6175·6469·7464·3c2f··the·<tt>auditd</ | ||
| 00000b80:· | 00000b80:·7474·3e20·6461·656d·6f6e·2069·7320·636f··tt>·daemon·is·co | ||
| 00000b90:·6 | 00000b90:·6e66·6967·7572·6564·2074·6f20·7573·6520··nfigured·to·use· | ||
| 00000ba0:· | 00000ba0:·7468·650a·3c74·743e·6175·6765·6e72·756c··the.<tt>augenrul | ||
| 00000bb0:·6 | 00000bb0:·6573·3c2f·7474·3e20·7072·6f67·7261·6d20··es</tt>·program· | ||
| 00000bc0:· | 00000bc0:·746f·2072·6561·6420·6175·6469·7420·7275··to·read·audit·ru | ||
| 00000bd0:·6 | 00000bd0:·6c65·7320·6475·7269·6e67·2064·6165·6d6f··les·during·daemo | ||
| 00000be0:·2073· | 00000be0:·6e20·7374·6172·7475·7020·2874·6865·0a64··n·startup·(the.d | ||
| Max diff block lines reached; 5841217/7712799 bytes (75.73%) of diff not shown. | |||
| Offset 64, 274 lines modified | Offset 64, 274 lines modified | ||
| 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | ||
| 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | ||
| 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | ||
| 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | ||
| 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | ||
| 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | ||
| 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | ||
| 00000460:·3e0a·2020·2020·2020·3c74·643e·4 | 00000460:·3e0a·2020·2020·2020·3c74·643e·496e·7374··>.······<td>Inst | ||
| 00000470:·7265·2053·4d41·5020·6973·206e·6f74·2064··re·SMAP·is·not·d | |||
| 000004 | 00000470:·616c·6c20·5041·4520·4b65·726e·656c·206f··all·PAE·Kernel·o | ||
| 00000480:·6e20·5375·7070·6f72·7465·6420·3332·2d62··n·Supported·32-b | |||
| 00000490:·6974·2078·3836·2053·7973·7465·6d73·3c2f··it·x86·Systems</ | |||
| 000004a0:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 000004b0:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 000004c0:·2020·2020·2020·2020·5379·7374·656d·7320··········Systems· | |||
| 000004d0:·7468·6174·2061·7265·2075·7369·6e67·2074··that·are·using·t | |||
| 000004e0:·6865·2036·342d·6269·7420·7838·3620·6b65··he·64-bit·x86·ke | |||
| 000004f0:·726e·656c·2070·6163·6b61·6765·0a64·6f20··rnel·package.do· | |||
| 00000500:·6e6f·7420·6e65·6564·2074·6f20·696e·7374··not·need·to·inst | |||
| 00000510:·616c·6c20·7468·6520·6b65·726e·656c·2d50··all·the·kernel-P | |||
| 00000520:·4145·2070·6163·6b61·6765·2062·6563·6175··AE·package·becau | |||
| 00000530:·7365·2074·6865·2036·342d·6269·740a·7838··se·the·64-bit.x8 | |||
| 00000540:·3620·6b65·726e·656c·2061·6c72·6561·6479··6·kernel·already | |||
| 00000550:·2069·6e63·6c75·6465·7320·7468·6973·2073···includes·this·s | |||
| 00000560:·7570·706f·7274·2e20·486f·7765·7665·722c··upport.·However, | |||
| 00000570:·2069·6620·7468·6520·7379·7374·656d·2069···if·the·system·i | |||
| 00000580:·730a·3332·2d62·6974·2061·6e64·2061·6c73··s.32-bit·and·als | |||
| 00000590:·6f20·7375·7070·6f72·7473·2074·6865·2050··o·supports·the·P | |||
| 000005a0:·4145·2061·6e64·204e·5820·6665·6174·7572··AE·and·NX·featur | |||
| 000005b0:·6573·2061·730a·6465·7465·726d·696e·6564··es·as.determined | |||
| 000005c0:·2069·6e20·7468·6520·7072·6576·696f·7573···in·the·previous | |||
| 000005d0:·2073·6563·7469·6f6e·2c20·7468·6520·6b65···section,·the·ke | |||
| 000005e0:·726e·656c·2d50·4145·2070·6163·6b61·6765··rnel-PAE·package | |||
| 000005f0:·2073·686f·756c·640a·6265·2069·6e73·7461···should.be·insta | |||
| 00000600:·6c6c·6564·2074·6f20·656e·6162·6c65·2058··lled·to·enable·X | |||
| 00000610:·4420·6f72·204e·5820·7375·7070·6f72·742e··D·or·NX·support. | |||
| 00000620:·0a54·6865·203c·636f·6465·3e6b·6572·6e65··.The·<code>kerne | |||
| 00000630:·6c2d·5041·453c·2f63·6f64·653e·2070·6163··l-PAE</code>·pac | |||
| 00000640:·6b61·6765·2063·616e·2062·6520·696e·7374··kage·can·be·inst | |||
| 00000650:·616c·6c65·6420·7769·7468·2074·6865·2066··alled·with·the·f | |||
| 00000660:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 00000670:·3a0a·3c70·7265·3e0a·2420·7375·646f·2079··:.<pre>.$·sudo·y | |||
| 00000680:·756d·2069·6e73·7461·6c6c·206b·6572·6e65··um·install·kerne | |||
| 00000690:·6c2d·5041·453c·2f70·7265·3e0a·5468·6520··l-PAE</pre>.The· | |||
| 000006a0:·696e·7374·616c·6c61·7469·6f6e·2070·726f··installation·pro | |||
| 000006b0:·6365·7373·2073·686f·756c·6420·616c·736f··cess·should·also | |||
| 000006c0:·2068·6176·6520·636f·6e66·6967·7572·6564···have·configured | |||
| 000006d0:·2074·6865·0a62·6f6f·746c·6f61·6465·7220···the.bootloader· | |||
| 000006e0:·746f·206c·6f61·6420·7468·6520·6e65·7720··to·load·the·new· | |||
| 000006f0:·6b65·726e·656c·2061·7420·626f·6f74·2e20··kernel·at·boot.· | |||
| 00000700:·5665·7269·6679·2074·6869·7320·6166·7465··Verify·this·afte | |||
| 00000710:·7220·7265·626f·6f74·0a61·6e64·206d·6f64··r·reboot.and·mod | |||
| 00000720:·6966·7920·3c74·743e·2f65·7463·2f64·6566··ify·<tt>/etc/def | |||
| 00000730:·6175·6c74·2f67·7275·623c·2f74·743e·2069··ault/grub</tt>·i | |||
| 00000740:·6620·6e65·6365·7373·6172·792e·0a20·2020··f·necessary..··· | |||
| 00000 | 00000750:·2020·203c·2f74·643e·0a20·2020·2020·203c·····</td>.······< | ||
| 00000 | 00000760:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000 | 00000770:·5553·223e·0a20·2020·2020·2020·204f·6e20··US">.········On· | ||
| 00000780:·3332·2d62·6974·2073·7973·7465·6d73·2074··32-bit·systems·t | |||
| 00000790:·6861·7420·7375·7070·6f72·7420·7468·6520··hat·support·the· | |||
| 000007a0:·5844·206f·7220·4e58·2062·6974·2c20·7468··XD·or·NX·bit,·th | |||
| 000007b0:·6520·7665·6e64·6f72·2d73·7570·706c·6965··e·vendor-supplie | |||
| 000007c0:·640a·5041·4520·6b65·726e·656c·2069·7320··d.PAE·kernel·is· | |||
| 000007d0:·7265·7175·6972·6564·2074·6f20·656e·6162··required·to·enab | |||
| 000007e0:·6c65·2065·6974·6865·7220·4578·6563·7574··le·either·Execut | |||
| 000007f0:·6520·4469·7361·626c·6520·2858·4429·206f··e·Disable·(XD)·o | |||
| 00000800:·7220·4e6f·2045·7865·6375·7465·2028·4e58··r·No·Execute·(NX | |||
| 00000810:·2920·7375·7070·6f72·742e·0a20·2020·2020··)·support..····· | |||
| 000004c0:·2053·4d41·5020·6973·2075·7365·6420·746f···SMAP·is·used·to | |||
| 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | |||
| 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | |||
| 000004f0:·6d20·756e·696e·7465·6e74·696f·6e61·6c6c··m·unintentionall | |||
| 00000500:·7920·7265·6164·696e·672f·7772·6974·696e··y·reading/writin | |||
| 00000510:·6720·696e·746f·0a6d·656d·6f72·7920·7061··g·into.memory·pa | |||
| 00000520:·6765·7320·696e·2074·6865·2075·7365·7220··ges·in·the·user· | |||
| 00000530:·7370·6163·652c·2069·7420·6973·2065·6e61··space,·it·is·ena | |||
| 00000540:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | |||
| 00000550:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | |||
| 00000560:·656c·2033·2e37·2e0a·4275·7420·6974·2063··el·3.7..But·it·c | |||
| 00000570:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | |||
| 00000580:·2074·6872·6f75·6768·206b·6572·6e65·6c20···through·kernel· | |||
| 00000590:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | |||
| 000005a0:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | |||
| 000005b0:·7065·7276·6973·6f72·204d·6f64·6520·4163··pervisor·Mode·Ac | |||
| 000005c0:·6365·7373·2050·7265·7665·6e74·696f·6e20··cess·Prevention· | |||
| 000005d0:·2853·4d41·5029·2069·7320·6e6f·7420·6469··(SMAP)·is·not·di | |||
| 000005e0:·7361·626c·6564·2062·790a·7468·6520·3c74··sabled·by.the·<t | |||
| 000005f0:·743e·6e6f·736d·6170·3c2f·7474·3e20·626f··t>nosmap</tt>·bo | |||
| 00000600:·6f74·2070·6172·616d·656e·7465·7220·6f70··ot·paramenter·op | |||
| 00000610:·7469·6f6e·2e0a·0a43·6865·636b·2074·6861··tion...Check·tha | |||
| 00000620:·7420·7468·6520·6c69·6e65·203c·7072·653e··t·the·line·<pre> | |||
| 00000630:·4752·5542·5f43·4d44·4c49·4e45·5f4c·494e··GRUB_CMDLINE_LIN | |||
| 00000640:·5558·3d22·2e2e·2e22·3c2f·7072·653e·2077··UX="..."</pre>·w | |||
| 00000650:·6974·6869·6e20·3c74·743e·2f65·7463·2f64··ithin·<tt>/etc/d | |||
| 00000660:·6566·6175·6c74·2f67·7275·623c·2f74·743e··efault/grub</tt> | |||
| 00000670:·0a64·6f65·736e·2774·2063·6f6e·7461·696e··.doesn't·contain | |||
| 00000680:·2074·6865·2061·7267·756d·656e·7420·3c74···the·argument·<t | |||
| 00000690:·743e·6e6f·736d·6170·3c2f·7474·3e2e·0a52··t>nosmap</tt>..R | |||
| 000006a0:·756e·2074·6865·2066·6f6c·6c6f·7769·6e67··un·the·following | |||
| 000006b0:·2063·6f6d·6d61·6e64·2074·6f20·7570·6461···command·to·upda | |||
| 000006c0:·7465·2063·6f6d·6d61·6e64·206c·696e·6520··te·command·line· | |||
| 000006d0:·666f·7220·616c·7265·6164·7920·696e·7374··for·already·inst | |||
| 000006e0:·616c·6c65·6420·6b65·726e·656c·733a·0a3c··alled·kernels:.< | |||
| 000006f0:·7072·653e·2320·6772·7562·6279·202d·2d75··pre>#·grubby·--u | |||
| 00000700:·7064·6174·652d·6b65·726e·656c·3d41·4c4c··pdate-kernel=ALL | |||
| 00000710:·202d·2d72·656d·6f76·652d·6172·6773·3d22···--remove-args=" | |||
| 00000720:·6e6f·736d·6170·223c·2f70·7265·3e0a·2020··nosmap"</pre>.·· | |||
| 00000730:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000740:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000750:·2d55·5322·3e0a·2020·2020·2020·2020·4469··-US">.········Di | |||
| 00000760:·7361·626c·696e·6720·534d·4150·2063·616e··sabling·SMAP·can | |||
| 00000770:·2066·6163·696c·6974·6174·6520·6578·706c···facilitate·expl | |||
| 00000780:·6f69·7461·7469·6f6e·206f·6620·7675·6c6e··oitation·of·vuln | |||
| 00000790:·6572·6162·696c·6974·6965·7320·6361·7573··erabilities·caus | |||
| 000007a0:·6564·2062·7920·756e·696e·7465·6e64·6564··ed·by·unintended | |||
| 000007b0:·2061·6363·6573·7320·616e·640a·6d61·6e69···access·and.mani | |||
| 000007c0:·7075·6c61·7469·6f6e·206f·6620·6461·7461··pulation·of·data | |||
| 000007d0:·2069·6e20·7468·6520·7573·6572·2073·7061···in·the·user·spa | |||
| 000007e0:·6365·2e0a·2020·2020·2020·3c2f·7464·3e0a··ce..······</td>. | |||
| 000007f0:·2020·2020·3c2f·7472·3e0a·2020·2020·3c74······</tr>.····<t | |||
| 00000800:·723e·0a20·2020·2020·203c·7464·3e52·313c··r>.······<td>R1< | |||
| 00000810:·2f74·643e·0a20·2020·2020·203c·7464·3e49··/td>.······<td>I | |||
| 00000820:·6e73·7461·6c6c·2074·6865·2064·7261·6375··nstall·the·dracu | |||
| 00000830:·742d·6669·7073·2d61·6573·6e69·2050·6163··t-fips-aesni·Pac | |||
| 00000840:·6b61·6765·3c2f·7464·3e0a·2020·2020·2020··kage</td>.······ | |||
| 00000850:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000860:·2d55·5322·3e0a·2020·2020·2020·2020·546f··-US">.········To | |||
| Max diff block lines reached; 2966820/3003274 bytes (98.79%) of diff not shown. | |||
| Offset 1623, 138 lines modified | Offset 1623, 138 lines modified | ||
| 00006560:·6520·7468·6520·7379·7374·656d·2074·6f20··e·the·system·to· | 00006560:·6520·7468·6520·7379·7374·656d·2074·6f20··e·the·system·to· | ||
| 00006570:·706f·7465·6e74·6961·6c20·636f·6d70·726f··potential·compro | 00006570:·706f·7465·6e74·6961·6c20·636f·6d70·726f··potential·compro | ||
| 00006580:·6d69·7365·2e0a·2020·2020·2020·3c2f·7464··mise..······</td | 00006580:·6d69·7365·2e0a·2020·2020·2020·3c2f·7464··mise..······</td | ||
| 00006590:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | 00006590:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 000065a0:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | 000065a0:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | ||
| 000065b0:·2e32·2e32·3c2f·7464·3e0a·2020·2020·2020··.2.2</td>.······ | 000065b0:·2e32·2e32·3c2f·7464·3e0a·2020·2020·2020··.2.2</td>.······ | ||
| 000065c0:·3c74·643e·456e·7375·7265·2067·7067·6368··<td>Ensure·gpgch | 000065c0:·3c74·643e·456e·7375·7265·2067·7067·6368··<td>Ensure·gpgch | ||
| 000065d0:·6563·6b20·456e·6162·6c65·6420· | 000065d0:·6563·6b20·456e·6162·6c65·6420·666f·7220··eck·Enabled·for· | ||
| 000065e0:·6169·6e20·7975·6d20·436f·6e66·6967·7572··ain·yum·Configur | |||
| 000065f0:·6174·696f·6e3c·2f74·643e·0a20·2020·2020··ation</td>.····· | |||
| 00006 | 000065e0:·416c·6c20·7975·6d20·5061·636b·6167·6520··All·yum·Package· | ||
| 000065f0:·5265·706f·7369·746f·7269·6573·3c2f·7464··Repositories</td | |||
| 00006600:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00006610:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00006620:·2020·2020·2020·546f·2065·6e73·7572·6520········To·ensure· | |||
| 00006630:·7369·676e·6174·7572·6520·6368·6563·6b69··signature·checki | |||
| 00006640:·6e67·2069·7320·6e6f·7420·6469·7361·626c··ng·is·not·disabl | |||
| 00006650:·6564·2066·6f72·0a61·6e79·2072·6570·6f73··ed·for.any·repos | |||
| 00006660:·2c20·7265·6d6f·7665·2061·6e79·206c·696e··,·remove·any·lin | |||
| 00006670:·6573·2066·726f·6d20·6669·6c65·7320·696e··es·from·files·in | |||
| 00006680:·203c·7474·3e2f·6574·632f·7975·6d2e·7265···<tt>/etc/yum.re | |||
| 00006690:·706f·732e·643c·2f74·743e·206f·6620·7468··pos.d</tt>·of·th | |||
| 000066a0:·6520·666f·726d·3a0a·3c70·7265·3e67·7067··e·form:.<pre>gpg | |||
| 000066b0:·6368·6563·6b3d·303c·2f70·7265·3e0a·2020··check=0</pre>.·· | |||
| 000066c0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 000066d0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 000066 | 000066e0:·2d55·5322·3e0a·2020·2020·2020·2020·5665··-US">.········Ve | ||
| 000066f0:·7269·6679·696e·6720·7468·6520·6175·7468··rifying·the·auth | |||
| 00006700:·656e·7469·6369·7479·206f·6620·7468·6520··enticity·of·the· | |||
| 00006710:·736f·6674·7761·7265·2070·7269·6f72·2074··software·prior·t | |||
| 00006620:·6865·203c·7474·3e67·7067·6368·6563·6b3c··he·<tt>gpgcheck< | |||
| 00006630:·2f74·743e·206f·7074·696f·6e20·636f·6e74··/tt>·option·cont | |||
| 00006640:·726f·6c73·2077·6865·7468·6572·0a52·504d··rols·whether.RPM | |||
| 00006650:·2070·6163·6b61·6765·7327·2073·6967·6e61···packages'·signa | |||
| 00006660:·7475·7265·7320·6172·6520·616c·7761·7973··tures·are·always | |||
| 00006670:·2063·6865·636b·6564·2070·7269·6f72·2074···checked·prior·t | |||
| 00006 | 00006720:·6f20·696e·7374·616c·6c61·7469·6f6e·2076··o·installation·v | ||
| 00006690:·546f·2063·6f6e·6669·6775·7265·2079·756d··To·configure·yum | |||
| 000066a0:·2074·6f20·6368·6563·6b20·7061·636b·6167···to·check·packag | |||
| 000066b0:·6520·7369·676e·6174·7572·6573·2062·6566··e·signatures·bef | |||
| 000066c0:·6f72·6520·696e·7374·616c·6c69·6e67·0a74··ore·installing.t | |||
| 000066d0:·6865·6d2c·2065·6e73·7572·6520·7468·6520··hem,·ensure·the· | |||
| 000066e0:·666f·6c6c·6f77·696e·6720·6c69·6e65·2061··following·line·a | |||
| 000066f0:·7070·6561·7273·2069·6e20·3c74·743e·2f65··ppears·in·<tt>/e | |||
| 00006700:·7463·2f79·756d·2e63·6f6e·663c·2f74·743e··tc/yum.conf</tt> | |||
| 00006710:·2069·6e0a·7468·6520·3c74·743e·5b6d·6169···in.the·<tt>[mai | |||
| 00006720:·6e5d·3c2f·7474·3e20·7365·6374·696f·6e3a··n]</tt>·section: | |||
| 00006730:·0a3c·7072·653e·6770·6763·6865·636b·3d31··.<pre>gpgcheck=1 | |||
| 00006740:·3c2f·7072·653e·0a20·2020·2020·203c·2f74··</pre>.······</t | |||
| 00006750:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | |||
| 00006760:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00006770:·2020·2020·2020·2043·6861·6e67·6573·2074·········Changes·t | |||
| 00006780:·6f20·616e·7920·736f·6674·7761·7265·2063··o·any·software·c | |||
| 00006790:·6f6d·706f·6e65·6e74·7320·6361·6e20·6861··omponents·can·ha | |||
| 000067a0:·7665·2073·6967·6e69·6669·6361·6e74·2065··ve·significant·e | |||
| 000067b0:·6666·6563·7473·206f·6e20·7468·650a·6f76··ffects·on·the.ov | |||
| 000067c0:·6572·616c·6c20·7365·6375·7269·7479·206f··erall·security·o | |||
| 000067d0:·6620·7468·6520·6f70·6572·6174·696e·6720··f·the·operating· | |||
| 000067e0:·7379·7374·656d·2e20·5468·6973·2072·6571··system.·This·req | |||
| 000067f0:·7569·7265·6d65·6e74·2065·6e73·7572·6573··uirement·ensures | |||
| 00006800:·2074·6865·0a73·6f66·7477·6172·6520·6861···the.software·ha | |||
| 00006810:·7320·6e6f·7420·6265·656e·2074·616d·7065··s·not·been·tampe | |||
| 00006820:·7265·6420·7769·7468·2061·6e64·2074·6861··red·with·and·tha | |||
| 00006830:·7420·6974·2068·6173·2062·6565·6e20·7072··t·it·has·been·pr | |||
| 00006840:·6f76·6964·6564·2062·7920·610a·7472·7573··ovided·by·a.trus | |||
| 00006850:·7465·6420·7665·6e64·6f72·2e0a·3c62·7220··ted·vendor..<br· | |||
| 00006860:·2f3e·0a41·6363·6f72·6469·6e67·6c79·2c20··/>.Accordingly,· | |||
| 00006870:·7061·7463·6865·732c·2073·6572·7669·6365··patches,·service | |||
| 00006880:·2070·6163·6b73·2c20·6465·7669·6365·2064···packs,·device·d | |||
| 00006890:·7269·7665·7273·2c20·6f72·206f·7065·7261··rivers,·or·opera | |||
| 000068a0:·7469·6e67·2073·7973·7465·6d0a·636f·6d70··ting·system.comp | |||
| 000068b0:·6f6e·656e·7473·206d·7573·7420·6265·2073··onents·must·be·s | |||
| 000068c0:·6967·6e65·6420·7769·7468·2061·2063·6572··igned·with·a·cer | |||
| 000068d0:·7469·6669·6361·7465·2072·6563·6f67·6e69··tificate·recogni | |||
| 000068e0:·7a65·6420·616e·6420·6170·7072·6f76·6564··zed·and·approved | |||
| 000068f0:·2062·7920·7468·650a·6f72·6761·6e69·7a61···by·the.organiza | |||
| 00006900:·7469·6f6e·2e0a·3c62·7220·2f3e·5665·7269··tion..<br·/>Veri | |||
| 00006910:·6679·696e·6720·7468·6520·6175·7468·656e··fying·the·authen | |||
| 00006920:·7469·6369·7479·206f·6620·7468·6520·736f··ticity·of·the·so | |||
| 00006930:·6674·7761·7265·2070·7269·6f72·2074·6f20··ftware·prior·to· | |||
| 00006940:·696e·7374·616c·6c61·7469·6f6e·0a76·616c··installation.val | |||
| 00006950:·6964·6174·6573·2074·6865·2069·6e74·6567··idates·the·integ | |||
| 00006960:·7269·7479·206f·6620·7468·6520·7061·7463··rity·of·the·patc | |||
| 00006970:·6820·6f72·2075·7067·7261·6465·2072·6563··h·or·upgrade·rec | |||
| 00006980:·6569·7665·6420·6672·6f6d·2061·2076·656e··eived·from·a·ven | |||
| 00006990:·646f·722e·0a54·6869·7320·656e·7375·7265··dor..This·ensure | |||
| 000069a0:·7320·7468·6520·736f·6674·7761·7265·2068··s·the·software·h | |||
| 000069b0:·6173·206e·6f74·2062·6565·6e20·7461·6d70··as·not·been·tamp | |||
| 000069c0:·6572·6564·2077·6974·6820·616e·6420·7468··ered·with·and·th | |||
| 000069d0:·6174·2069·7420·6861·7320·6265·656e·0a70··at·it·has·been.p | |||
| 000069e0:·726f·7669·6465·6420·6279·2061·2074·7275··rovided·by·a·tru | |||
| 000069f0:·7374·6564·2076·656e·646f·722e·2053·656c··sted·vendor.·Sel | |||
| 00006a00:·662d·7369·676e·6564·2063·6572·7469·6669··f-signed·certifi | |||
| 00006a10:·6361·7465·7320·6172·6520·6469·7361·6c6c··cates·are·disall | |||
| 00006a20:·6f77·6564·2062·790a·7468·6973·2072·6571··owed·by.this·req | |||
| 00006a30:·7569·7265·6d65·6e74·2e20·4365·7274·6966··uirement.·Certif | |||
| 00006a40:·6963·6174·6573·2075·7365·6420·746f·2076··icates·used·to·v | |||
| 00006a50:·6572·6966·7920·7468·6520·736f·6674·7761··erify·the·softwa | |||
| 00006a60:·7265·206d·7573·7420·6265·2066·726f·6d20··re·must·be·from· | |||
| 00006a70:·616e·0a61·7070·726f·7665·6420·4365·7274··an.approved·Cert | |||
| 00006a80:·6966·6963·6174·6520·4175·7468·6f72·6974··ificate·Authorit | |||
| 00006a90:·7920·2843·4129·2e0a·2020·2020·2020·3c2f··y·(CA)..······</ | |||
| 00006aa0:·7464·3e0a·2020·2020·3c2f·7472·3e0a·2020··td>.····</tr>.·· | |||
| 00006ab0:·2020·3c74·723e·0a20·2020·2020·203c·7464····<tr>.······<td | |||
| 00006ac0:·3e31·2e32·2e32·3c2f·7464·3e0a·2020·2020··>1.2.2</td>.···· | |||
| 00006ad0:·2020·3c74·643e·456e·7375·7265·2067·7067····<td>Ensure·gpg | |||
| 00006ae0:·6368·6563·6b20·456e·6162·6c65·6420·666f··check·Enabled·fo | |||
| 00006af0:·7220·416c·6c20·7975·6d20·5061·636b·6167··r·All·yum·Packag | |||
| 00006b00:·6520·5265·706f·7369·746f·7269·6573·3c2f··e·Repositories</ | |||
| 00006b10:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 00006b20:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00006b30:·2020·2020·2020·2020·546f·2065·6e73·7572··········To·ensur | |||
| 00006b40:·6520·7369·676e·6174·7572·6520·6368·6563··e·signature·chec | |||
| 00006b50:·6b69·6e67·2069·7320·6e6f·7420·6469·7361··king·is·not·disa | |||
| 00006b60:·626c·6564·2066·6f72·0a61·6e79·2072·6570··bled·for.any·rep | |||
| 00006b70:·6f73·2c20·7265·6d6f·7665·2061·6e79·206c··os,·remove·any·l | |||
| 00006b80:·696e·6573·2066·726f·6d20·6669·6c65·7320··ines·from·files· | |||
| 00006b90:·696e·203c·7474·3e2f·6574·632f·7975·6d2e··in·<tt>/etc/yum. | |||
| 00006ba0:·7265·706f·732e·643c·2f74·743e·206f·6620··repos.d</tt>·of· | |||
| 00006bb0:·7468·6520·666f·726d·3a0a·3c70·7265·3e67··the·form:.<pre>g | |||
| 00006bc0:·7067·6368·6563·6b3d·303c·2f70·7265·3e0a··pgcheck=0</pre>. | |||
| 00006bd0:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | |||
| 00006be0:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 00006bf0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 00006c00:·5665·7269·6679·696e·6720·7468·6520·6175··Verifying·the·au | |||
| 00006c10:·7468·656e·7469·6369·7479·206f·6620·7468··thenticity·of·th | |||
| 00006c20:·6520·736f·6674·7761·7265·2070·7269·6f72··e·software·prior | |||
| Max diff block lines reached; 1139451/1157141 bytes (98.47%) of diff not shown. | |||
| Offset 367, 14 lines modified | Offset 367, 37 lines modified | ||
| 367 | ······································The·noexec·mount·option·can·be·used·to·prevent·········directories·such·as | 367 | ······································The·noexec·mount·option·can·be·used·to·prevent·········directories·such·as |
| 368 | 1.1.3.5.4·········Add·noexec·Option···binaries·from·being·executed·out·of·/var/tmp.·Add·the··/var/tmp·should | 368 | 1.1.3.5.4·········Add·noexec·Option···binaries·from·being·executed·out·of·/var/tmp.·Add·the··/var/tmp·should |
| 369 | ··················to·/var/tmp·········noexec·option·to·the·fourth·column·of·/etc/fstab·for···never·be·necessary | 369 | ··················to·/var/tmp·········noexec·option·to·the·fourth·column·of·/etc/fstab·for···never·be·necessary |
| 370 | ······································the·line·which·controls·mounting·of·/var/tmp.··········in·normal·operation | 370 | ······································the·line·which·controls·mounting·of·/var/tmp.··········in·normal·operation |
| 371 | ·····························································································and·can·expose·the | 371 | ·····························································································and·can·expose·the |
| 372 | ·····························································································system·to·potential | 372 | ·····························································································system·to·potential |
| 373 | ·····························································································compromise. | 373 | ·····························································································compromise. |
| 374 | ·····························································································Verifying·the | ||
| 375 | ·····························································································authenticity·of·the | ||
| 376 | ·····························································································software·prior·to | ||
| 377 | ·····························································································installation | ||
| 378 | ·····························································································validates·the | ||
| 379 | ·····························································································integrity·of·the | ||
| 380 | ·····························································································patch·or·upgrade | ||
| 381 | ·····························································································received·from·a | ||
| 382 | ·····························································································vendor.·This·ensures | ||
| 383 | ··················Ensure·gpgcheck·····To·ensure·signature·checking·is·not·disabled·for·any···the·software·has·not | ||
| 384 | ··················Enabled·for·All·yum·repos,·remove·any·lines·from·files·in·/etc/yum.repos.d·been·tampered·with | ||
| 385 | 1.2.2·············Package·············of·the·form:···········································and·that·it·has·been | ||
| 386 | ··················Repositories········gpgcheck=0·············································provided·by·a | ||
| 387 | ·····························································································trusted·vendor. | ||
| 388 | ·····························································································Self-signed | ||
| 389 | ·····························································································certificates·are | ||
| 390 | ·····························································································disallowed·by·this | ||
| 391 | ·····························································································requirement. | ||
| 392 | ·····························································································Certificates·used·to | ||
| 393 | ·····························································································verify·the·software | ||
| 394 | ·····························································································must·be·from·an | ||
| 395 | ·····························································································approved·Certificate | ||
| 396 | ·····························································································Authority·(CA)." | ||
| 374 | ·····························································································Changes·to·any | 397 | ·····························································································Changes·to·any |
| 375 | ·····························································································software·components | 398 | ·····························································································software·components |
| 376 | ·····························································································can·have·significant | 399 | ·····························································································can·have·significant |
| 377 | ·····························································································effects·on·the | 400 | ·····························································································effects·on·the |
| 378 | ·····························································································overall·security·of | 401 | ·····························································································overall·security·of |
| 379 | ·····························································································the·operating | 402 | ·····························································································the·operating |
| 380 | ·····························································································system.·This | 403 | ·····························································································system.·This |
| Offset 414, 37 lines modified | Offset 437, 14 lines modified | ||
| 414 | ·····························································································disallowed·by·this | 437 | ·····························································································disallowed·by·this |
| 415 | ·····························································································requirement. | 438 | ·····························································································requirement. |
| 416 | ·····························································································Certificates·used·to | 439 | ·····························································································Certificates·used·to |
| 417 | ·····························································································verify·the·software | 440 | ·····························································································verify·the·software |
| 418 | ·····························································································must·be·from·an | 441 | ·····························································································must·be·from·an |
| 419 | ·····························································································approved·Certificate | 442 | ·····························································································approved·Certificate |
| 420 | ·····························································································Authority·(CA). | 443 | ·····························································································Authority·(CA). |
| 421 | ·····························································································Verifying·the | ||
| 422 | ·····························································································authenticity·of·the | ||
| 423 | ·····························································································software·prior·to | ||
| 424 | ·····························································································installation | ||
| 425 | ·····························································································validates·the | ||
| 426 | ·····························································································integrity·of·the | ||
| 427 | ·····························································································patch·or·upgrade | ||
| 428 | ·····························································································received·from·a | ||
| 429 | ·····························································································vendor.·This·ensures | ||
| 430 | ··················Ensure·gpgcheck·····To·ensure·signature·checking·is·not·disabled·for·any···the·software·has·not | ||
| 431 | ··················Enabled·for·All·yum·repos,·remove·any·lines·from·files·in·/etc/yum.repos.d·been·tampered·with | ||
| 432 | 1.2.2·············Package·············of·the·form:···········································and·that·it·has·been | ||
| 433 | ··················Repositories········gpgcheck=0·············································provided·by·a | ||
| 434 | ·····························································································trusted·vendor. | ||
| 435 | ·····························································································Self-signed | ||
| 436 | ·····························································································certificates·are | ||
| 437 | ·····························································································disallowed·by·this | ||
| 438 | ·····························································································requirement. | ||
| 439 | ·····························································································Certificates·used·to | ||
| 440 | ·····························································································verify·the·software | ||
| 441 | ·····························································································must·be·from·an | ||
| 442 | ·····························································································approved·Certificate | ||
| 443 | ·····························································································Authority·(CA)." | ||
| 444 | ·····························································································Password·protection | 444 | ·····························································································Password·protection |
| 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader | 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader |
| 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration | 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration |
| 447 | ······································settings.··············································ensures·users·with | 447 | ······································settings.··············································ensures·users·with |
| 448 | ·····························································································physical·access | 448 | ·····························································································physical·access |
| 449 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 449 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 450 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important | 450 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important |
| Offset 461, 87 lines modified | Offset 461, 66 lines modified | ||
| 461 | 1.3.1·············Set·the·UEFI·Boot···Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 461 | 1.3.1·············Set·the·UEFI·Boot···Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 462 | ··················Loader·Password·····generate·a·hash·for·the·password·by·running·the········alter·important | 462 | ··················Loader·Password·····generate·a·hash·for·the·password·by·running·the········alter·important |
| 463 | ······································following·command:·····································bootloader·settings. | 463 | ······································following·command:·····································bootloader·settings. |
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 469 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 470 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 471 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 468 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 469 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 470 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 471 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 472 | ··················Ownership···········command:···············································this·file·should·not | ||
| 473 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 474 | ·····························································································p | 472 | ·····························································································parameters. |
| 475 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | 473 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be |
| 476 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | 474 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify |
| 477 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | 475 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot |
| 478 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | 476 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. |
| 479 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | 477 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg |
| 480 | ·····························································································The·root·group·is·a | ||
| 481 | ·····························································································highly-privileged | ||
| 482 | ·····························································································group.·Furthermore, | ||
| 483 | ·····························································································the·group-owner·of | ||
| 484 | ·····························································································this·file·should·not | ||
| 485 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | ||
| 486 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | ||
| 487 | 1.3.2·············user.cfg·Group······the·file.·To·properly·set·the·group·owner·of·/boot/····Non-root·users·who | ||
| 488 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot | ||
| 489 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be | ||
| 490 | ·····························································································able·to·identify | ||
| 491 | ·····························································································weaknesses·in | ||
| 492 | ·····························································································security·upon·boot | ||
| 493 | ·····························································································and·be·able·to | ||
| 494 | ·····························································································exploit·them. | ||
| 495 | ·····························································································The·root·group·is·a | ||
| 496 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | ||
| 497 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | ||
| 498 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | ||
| 499 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not | ||
| 500 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access | ||
| 501 | ·····························································································privileges·anyway. | ||
| 502 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 503 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 504 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 505 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | ||
| 506 | ·····························································································boot·parameters. | ||
| 507 | ·····························································································Only·root·should·be | 478 | ·····························································································Only·root·should·be |
| Max diff block lines reached; 342682/356893 bytes (96.02%) of diff not shown. | |||
| Offset 41, 30 lines modified | Offset 41, 78 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 48 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········If·an·account·is·configured·for·password·authentication | ||
| 51 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 52 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 53 | 50 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | |
| 51 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 52 | their·UID·changed. | ||
| 53 | <br·/> | ||
| 54 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 55 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 56 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 57 | assigned. | ||
| 58 | ······</td> | ||
| 59 | ······<td·xml:lang="en-US"> | ||
| 60 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 61 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 62 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 63 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 64 | access·to·root·privileges·in·an·accountable·manner. | ||
| 65 | ······</td> | ||
| 66 | ····</tr> | ||
| 67 | ····<tr> | ||
| 68 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 69 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 70 | ······<td·xml:lang="en-US"> | ||
| 71 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 72 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 73 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 74 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 75 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 76 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 77 | plain·text·over·the·network.·By·default,·Red·Hat·Enterprise·Linux·8's | ||
| 78 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 79 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 80 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 81 | file·by·typing·the·following·command: | ||
| 82 | <pre> | ||
| 83 | $·sudo·echo·>·/etc/securetty | ||
| 84 | </pre> | ||
| 85 | ······</td> | ||
| 86 | ······<td·xml:lang="en-US"> | ||
| 87 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 88 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 89 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 90 | and·FISMA·Moderate·systems. | ||
| 91 | ······</td> | ||
| 92 | ····</tr> | ||
| 93 | ····<tr> | ||
| 94 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 95 | ······<td>Disable·SSH·Root·Login</td> | ||
| 96 | ······<td·xml:lang="en-US"> | ||
| 97 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 98 | system·directly·over·a·network. | ||
| 99 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 54 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 55 | <tt>/etc/pam.d/password-auth</tt> | ||
| 56 | 100 | <tt>/etc/ssh/sshd_config</tt>: | |
| 101 | <pre>PermitRootLogin·no</pre> | ||
| 57 | ······</td> | 102 | ······</td> |
| 58 | ······<td·xml:lang="en-US"> | 103 | ······<td·xml:lang="en-US"> |
| 59 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 60 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 61 | 104 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 105 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 106 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 107 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 108 | direct·attack·attempts·on·root's·password. | ||
| 62 | ······</td> | 109 | ······</td> |
| 63 | ····</tr> | 110 | ····</tr> |
| 64 | ····<tr> | 111 | ····<tr> |
| 65 | ······<td>3.1.1</td> | 112 | ······<td>3.1.1</td> |
| 66 | ······<td>Disable·GDM·Automatic·Login</td> | 113 | ······<td>Disable·GDM·Automatic·Login</td> |
| 67 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 68 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | 115 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| Offset 77, 28 lines modified | Offset 125, 63 lines modified | ||
| 77 | ······</td> | 125 | ······</td> |
| 78 | ······<td·xml:lang="en-US"> | 126 | ······<td·xml:lang="en-US"> |
| 79 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 127 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 80 | system·security. | 128 | system·security. |
| 81 | ······</td> | 129 | ······</td> |
| 82 | ····</tr> | 130 | ····</tr> |
| 83 | ····<tr> | 131 | ····<tr> |
| 84 | ······<td>3.1.1<br/>3. | 132 | ······<td>3.1.1<br/>3.1.5</td> |
| 85 | ······<td>Re | 133 | ······<td>Restrict·Virtual·Console·Root·Logins</td> |
| 86 | ······<td·xml:lang="en-US"> | 134 | ······<td·xml:lang="en-US"> |
| 87 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 88 | method,·providing·a·single·user·root·access·to·the·system | ||
| 89 | during·a·failed·boot·sequence. | ||
| 90 | <br·/><br·/> | ||
| 91 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 92 | 135 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | |
| 136 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 137 | <pre>vc/1 | ||
| 138 | vc/2 | ||
| 139 | vc/3 | ||
| 140 | vc/4</pre> | ||
| 93 | ······</td> | 141 | ······</td> |
| 94 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 95 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 96 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 97 | 143 | ········Preventing·direct·root·login·to·virtual·console·devices | |
| 144 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 145 | using·the·root·account. | ||
| 146 | ······</td> | ||
| 147 | ····</tr> | ||
| 148 | ····<tr> | ||
| 149 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 150 | ······<td>Restrict·Serial·Port·Root·Logins</td> | ||
| 151 | ······<td·xml:lang="en-US"> | ||
| 152 | ········To·restrict·root·logins·on·serial·ports, | ||
| 153 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 154 | <pre>ttyS0 | ||
| 155 | ttyS1</pre> | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| Max diff block lines reached; 459937/466421 bytes (98.61%) of diff not shown. | |||
| Offset 4048, 15 lines modified | Offset 4048, 15 lines modified | ||
| 4048 | <tt>RekeyLimit</tt>. | 4048 | <tt>RekeyLimit</tt>. |
| 4049 | ··</td> | 4049 | ··</td> |
| 4050 | ··<td·xml:lang="en-US"> | 4050 | ··<td·xml:lang="en-US"> |
| 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4052 | time-based·limit,·effects·of·potential·attacks·against | 4052 | time-based·limit,·effects·of·potential·attacks·against |
| 4053 | encryption·keys·are·limited. | 4053 | encryption·keys·are·limited. |
| 4054 | ··</td> | 4054 | ··</td> |
| 4055 | ··<td>var_ssh_client_rekey_limit_ | 4055 | ··<td>var_ssh_client_rekey_limit_size=1G<br/>var_ssh_client_rekey_limit_time=1hour</td> |
| 4056 | </tr> | 4056 | </tr> |
| 4057 | <tr> | 4057 | <tr> |
| 4058 | ··<td></td> | 4058 | ··<td></td> |
| 4059 | ··<td>CCE-83349-1</td> | 4059 | ··<td>CCE-83349-1</td> |
| 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4061 | ··<td·xml:lang="en-US"> | 4061 | ··<td·xml:lang="en-US"> |
| 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 3299, 16 lines modified | Offset 3299, 16 lines modified | ||
| 3299 | ······················································································································options,·which·can | 3299 | ······················································································································options,·which·can |
| 3300 | ······················································································································help·protect | 3300 | ······················································································································help·protect |
| 3301 | ······················································································································programs·which·use | 3301 | ······················································································································programs·which·use |
| 3302 | ······················································································································it. | 3302 | ······················································································································it. |
| 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_size=1G |
| 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_time=1hour |
| 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3311 | ······················································································································Some·SSH | 3311 | ······················································································································Some·SSH |
| 3312 | ······················································································································implementations·use | 3312 | ······················································································································implementations·use |
| 3313 | ······················································································································the·openssl·library | 3313 | ······················································································································the·openssl·library |
| 3314 | ······················································································································for·entropy,·which | 3314 | ······················································································································for·entropy,·which |
| Offset 24853, 18 lines modified | Offset 24853, 18 lines modified | ||
| 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | ||
| 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | ||
| 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | ||
| 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | ||
| 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | ||
| 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | ||
| 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | ||
| 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f7 | 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f74··ar_rekey_limit_t | ||
| 000611c0:·697a·653d·3147·3c62·722f·3e76·6172·5f72··ize=1G<br/>var_r | |||
| 000611 | 000611c0:·696d·653d·3168·6f75·723c·6272·2f3e·7661··ime=1hour<br/>va | ||
| 000611d0:·725f·7265·6b65·795f·6c69·6d69·745f·7369··r_rekey_limit_si | |||
| 000611e0:· | 000611e0:·7a65·3d31·473c·2f74·643e·0a3c·2f74·723e··ze=1G</td>.</tr> | ||
| 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | ||
| 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | ||
| 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | ||
| 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | ||
| 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | ||
| 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | ||
| 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US |
| Offset 7818, 16 lines modified | Offset 7818, 16 lines modified | ||
| 7818 | ·····································corresponding·private·key.····························system·where·the | 7818 | ·····································corresponding·private·key.····························system·where·the |
| 7819 | ···························································································associated·public | 7819 | ···························································································associated·public |
| 7820 | ···························································································key·has·been | 7820 | ···························································································key·has·been |
| 7821 | ···························································································installed. | 7821 | ···························································································installed. |
| 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_time=1hour |
| 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_size=1G |
| 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption | 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption |
| 7829 | ···························································································keys·are·limited. | 7829 | ···························································································keys·are·limited. |
| 7830 | ···························································································SSH·implementation | 7830 | ···························································································SSH·implementation |
| 7831 | ···························································································in·Red·Hat | 7831 | ···························································································in·Red·Hat |
| 7832 | ···························································································Enterprise·Linux·8 | 7832 | ···························································································Enterprise·Linux·8 |
| 7833 | ···························································································uses·the·openssl | 7833 | ···························································································uses·the·openssl |
| Offset 65, 14335 lines modified | Offset 65, 14335 lines modified | ||
| 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | ||
| 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | ||
| 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | ||
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | Diff chunk too large, falling back to line-by-line diff (11927 lines added, 11927 lines removed) | |
| 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e4 | 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e43··/>AU-12(c)<br/>C | ||
| 00000480:·4 | 00000480:·4d2d·3628·6129·3c2f·7464·3e0a·2020·2020··M-6(a)</td>.···· | ||
| 00000490:· | 00000490:·2020·3c74·643e·5265·636f·7264·2045·7665····<td>Record·Eve | ||
| 000004a0:·6 | 000004a0:·6e74·7320·7468·6174·204d·6f64·6966·7920··nts·that·Modify· | ||
| 000004b0:· | 000004b0:·7468·6520·5379·7374·656d·2773·2044·6973··the·System's·Dis | ||
| 000004c0:· | 000004c0:·6372·6574·696f·6e61·7279·2041·6363·6573··cretionary·Acces | ||
| 000004d0:· | 000004d0:·7320·436f·6e74·726f·6c73·202d·2063·686d··s·Controls·-·chm | ||
| 000004e0:·6 | 000004e0:·6f64·3c2f·7464·3e0a·2020·2020·2020·3c74··od</td>.······<t | ||
| 000004f0:· | 000004f0:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | ||
| 00000500:· | 00000500:·5322·3e0a·2020·2020·2020·2020·4174·2061··S">.········At·a | ||
| 00000510:· | 00000510:·206d·696e·696d·756d·2c20·7468·6520·6175···minimum,·the·au | ||
| 00000520:·6 | 00000520:·6469·7420·7379·7374·656d·2073·686f·756c··dit·system·shoul | ||
| 00000530:· | 00000530:·6420·636f·6c6c·6563·7420·6669·6c65·2070··d·collect·file·p | ||
| 00000540:·6 | 00000540:·6572·6d69·7373·696f·6e0a·6368·616e·6765··ermission.change | ||
| 00000550:·7 | 00000550:·7320·666f·7220·616c·6c20·7573·6572·7320··s·for·all·users· | ||
| 00000560:·6 | 00000560:·616e·6420·726f·6f74·2e20·4966·2074·6865··and·root.·If·the | ||
| 00000570:· | 00000570:·203c·7474·3e61·7564·6974·643c·2f74·743e···<tt>auditd</tt> | ||
| 00000580:· | 00000580:·2064·6165·6d6f·6e20·6973·2063·6f6e·6669···daemon·is·confi | ||
| 00000590:·756 | 00000590:·6775·7265·6420·746f·0a75·7365·2074·6865··gured·to.use·the | ||
| 000005a0:· | 000005a0:·203c·7474·3e61·7567·656e·7275·6c65·733c···<tt>augenrules< | ||
| 000005b0:·74 | 000005b0:·2f74·743e·2070·726f·6772·616d·2074·6f20··/tt>·program·to· | ||
| 000005c0:·7 | 000005c0:·7265·6164·2061·7564·6974·2072·756c·6573··read·audit·rules | ||
| 000005d0:· | 000005d0:·2064·7572·696e·6720·6461·656d·6f6e·2073···during·daemon·s | ||
| 000005e0:·7 | 000005e0:·7461·7274·7570·0a28·7468·6520·6465·6661··tartup.(the·defa | ||
| 000005f0:· | 000005f0:·756c·7429·2c20·6164·6420·7468·6520·666f··ult),·add·the·fo | ||
| 00000600:· | 00000600:·6c6c·6f77·696e·6720·6c69·6e65·2074·6f20··llowing·line·to· | ||
| 00000610:·61 | 00000610:·6120·6669·6c65·2077·6974·6820·7375·6666··a·file·with·suff | ||
| 00000620:·6 | 00000620:·6978·203c·7474·3e2e·7275·6c65·733c·2f74··ix·<tt>.rules</t | ||
| 00000630:· | 00000630:·743e·2069·6e0a·7468·6520·6469·7265·6374··t>·in.the·direct | ||
| 00000640:· | 00000640:·6f72·7920·3c74·743e·2f65·7463·2f61·7564··ory·<tt>/etc/aud | ||
| 00000650:· | 00000650:·6974·2f72·756c·6573·2e64·3c2f·7474·3e3a··it/rules.d</tt>: | ||
| 00000660:· | 00000660:·0a3c·7072·653e·2d61·2061·6c77·6179·732c··.<pre>-a·always, | ||
| 00000670:· | 00000670:·6578·6974·202d·4620·6172·6368·3d62·3332··exit·-F·arch=b32 | ||
| 00000680:· | 00000680:·202d·5320·6368·6d6f·6420·2d46·2061·7569···-S·chmod·-F·aui | ||
| 00000690:·6 | 00000690:·6426·6774·3b3d·3130·3030·202d·4620·6175··d>=1000·-F·au | ||
| 000006a0:· | 000006a0:·6964·213d·756e·7365·7420·2d46·206b·6579··id!=unset·-F·key | ||
| 000006b0:· | 000006b0:·3d70·6572·6d5f·6d6f·643c·2f70·7265·3e0a··=perm_mod</pre>. | ||
| 000006c0:· | 000006c0:·4966·2074·6865·2073·7973·7465·6d20·6973··If·the·system·is | ||
| 000006d0:· | 000006d0:·2036·3420·6269·7420·7468·656e·2061·6c73···64·bit·then·als | ||
| 000006e0:· | 000006e0:·6f20·6164·6420·7468·6520·666f·6c6c·6f77··o·add·the·follow | ||
| 000006f0:·6 | 000006f0:·696e·6720·6c69·6e65·3a0a·3c70·7265·3e2d··ing·line:.<pre>- | ||
| 00000700:·6 | 00000700:·6120·616c·7761·7973·2c65·7869·7420·2d46··a·always,exit·-F | ||
| 00000710:·206 | 00000710:·2061·7263·683d·6236·3420·2d53·2063·686d···arch=b64·-S·chm | ||
| 00000720:·6f | 00000720:·6f64·202d·4620·6175·6964·2667·743b·3d31··od·-F·auid>=1 | ||
| 00000730:· | 00000730:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 00000740:·6 | 00000740:·6574·202d·4620·6b65·793d·7065·726d·5f6d··et·-F·key=perm_m | ||
| 00000750:· | 00000750:·6f64·3c2f·7072·653e·0a49·6620·7468·6520··od</pre>.If·the· | ||
| 00000760:· | 00000760:·3c74·743e·6175·6469·7464·3c2f·7474·3e20··<tt>auditd</tt>· | ||
| 00000770:·646 | 00000770:·6461·656d·6f6e·2069·7320·636f·6e66·6967··daemon·is·config | ||
| 00000780:· | 00000780:·7572·6564·2074·6f20·7573·6520·7468·6520··ured·to·use·the· | ||
| 00000790:· | 00000790:·3c74·743e·6175·6469·7463·746c·3c2f·7474··<tt>auditctl</tt | ||
| 000007a0:· | 000007a0:·3e0a·7574·696c·6974·7920·746f·2072·6561··>.utility·to·rea | ||
| 000007b0:· | 000007b0:·6420·6175·6469·7420·7275·6c65·7320·6475··d·audit·rules·du | ||
| 000007c0:·7 | 000007c0:·7269·6e67·2064·6165·6d6f·6e20·7374·6172··ring·daemon·star | ||
| 000007d0:· | 000007d0:·7475·702c·2061·6464·2074·6865·2066·6f6c··tup,·add·the·fol | ||
| 000007e0:· | 000007e0:·6c6f·7769·6e67·206c·696e·6520·746f·0a3c··lowing·line·to.< | ||
| 000007f0:· | 000007f0:·7474·3e2f·6574·632f·6175·6469·742f·6175··tt>/etc/audit/au | ||
| 00000800:·6 | 00000800:·6469·742e·7275·6c65·733c·2f74·743e·2066··dit.rules</tt>·f | ||
| 00000810:· | 00000810:·696c·653a·0a3c·7072·653e·2d61·2061·6c77··ile:.<pre>-a·alw | ||
| 00000820:· | 00000820:·6179·732c·6578·6974·202d·4620·6172·6368··ays,exit·-F·arch | ||
| 00000830:· | 00000830:·3d62·3332·202d·5320·6368·6d6f·6420·2d46··=b32·-S·chmod·-F | ||
| 00000840:· | 00000840:·2061·7569·6426·6774·3b3d·3130·3030·202d···auid>=1000·- | ||
| 00000850:· | 00000850:·4620·6175·6964·213d·756e·7365·7420·2d46··F·auid!=unset·-F | ||
| 00000860:· | 00000860:·206b·6579·3d70·6572·6d5f·6d6f·643c·2f70···key=perm_mod</p | ||
| 00000870:· | 00000870:·7265·3e0a·4966·2074·6865·2073·7973·7465··re>.If·the·syste | ||
| 00000880:·6 | 00000880:·6d20·6973·2036·3420·6269·7420·7468·656e··m·is·64·bit·then | ||
| 00000890:· | 00000890:·2061·6c73·6f20·6164·6420·7468·6520·666f···also·add·the·fo | ||
| 000008a0:·6 | 000008a0:·6c6c·6f77·696e·6720·6c69·6e65·3a0a·3c70··llowing·line:.<p | ||
| 000008b0:·72 | 000008b0:·7265·3e2d·6120·616c·7761·7973·2c65·7869··re>-a·always,exi | ||
| 000008c0:· | 000008c0:·7420·2d46·2061·7263·683d·6236·3420·2d53··t·-F·arch=b64·-S | ||
| 000008d0:· | 000008d0:·2063·686d·6f64·202d·4620·6175·6964·2667···chmod·-F·auid&g | ||
| 000008e0:· | 000008e0:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 000008f0:· | 000008f0:·3d75·6e73·6574·202d·4620·6b65·793d·7065··=unset·-F·key=pe | ||
| 00000900:·7 | 00000900:·726d·5f6d·6f64·3c2f·7072·653e·0a20·2020··rm_mod</pre>.··· | ||
| 00000910:· | 00000910:·2020·203c·2f74·643e·0a20·2020·2020·203c·····</td>.······< | ||
| 00000920:· | 00000920:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000930:· | 00000930:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 00000940:· | 00000940:·2063·6861·6e67·696e·6720·6f66·2066·696c···changing·of·fil | ||
| 00000950:· | 00000950:·6520·7065·726d·6973·7369·6f6e·7320·636f··e·permissions·co | ||
| 00000960:·7 | 00000960:·756c·6420·696e·6469·6361·7465·2074·6861··uld·indicate·tha | ||
| 00000970:· | 00000970:·7420·6120·7573·6572·2069·7320·6174·7465··t·a·user·is·atte | ||
| 00000980:·6 | 00000980:·6d70·7469·6e67·2074·6f0a·6761·696e·2061··mpting·to.gain·a | ||
| 00000990:· | 00000990:·6363·6573·7320·746f·2069·6e66·6f72·6d61··ccess·to·informa | ||
| 000009a0:· | 000009a0:·7469·6f6e·2074·6861·7420·776f·756c·6420··tion·that·would· | ||
| 000009b0:·6 | 000009b0:·6f74·6865·7277·6973·6520·6265·2064·6973··otherwise·be·dis | ||
| 000009c0:·6 | 000009c0:·616c·6c6f·7765·642e·2041·7564·6974·696e··allowed.·Auditin | ||
| 000009d0:· | 000009d0:·6720·4441·4320·6d6f·6469·6669·6361·7469··g·DAC·modificati | ||
| 000009e0:·6 | 000009e0:·6f6e·730a·6361·6e20·6661·6369·6c69·7461··ons.can·facilita | ||
| 000009f0:· | 000009f0:·7465·2074·6865·2069·6465·6e74·6966·6963··te·the·identific | ||
| 00000a00:·6 | 00000a00:·6174·696f·6e20·6f66·2070·6174·7465·726e··ation·of·pattern | ||
| 00000a10:·7 | 00000a10:·7320·6f66·2061·6275·7365·2061·6d6f·6e67··s·of·abuse·among | ||
| 00000a20:· | 00000a20:·2062·6f74·6820·6175·7468·6f72·697a·6564···both·authorized | ||
| 00000a30:· | 00000a30:·2061·6e64·0a75·6e61·7574·686f·7269·7a65···and.unauthorize | ||
| 00000a40:·6 | 00000a40:·6420·7573·6572·732e·0a20·2020·2020·203c··d·users..······< | ||
| 00000a50:· | 00000a50:·2f74·643e·0a20·2020·203c·2f74·723e·0a20··/td>.····</tr>.· | ||
| 00000a60:·20 | 00000a60:·2020·203c·7472·3e0a·2020·2020·2020·3c74·····<tr>.······<t | ||
| 00000a70:·6 | 00000a70:·643e·4155·2d32·2864·293c·6272·2f3e·4155··d>AU-2(d)<br/>AU | ||
| 00000a80:· | 00000a80:·2d31·3228·6329·3c62·722f·3e41·432d·3628··-12(c)<br/>AC-6( | ||
| 00000a90:· | 00000a90:·3929·3c62·722f·3e43·4d2d·3628·6129·3c2f··9)<br/>CM-6(a)</ | ||
| 00000aa0:·746 | 00000aa0:·7464·3e0a·2020·2020·2020·3c74·643e·5265··td>.······<td>Re | ||
| 00000ab0:· | 00000ab0:·636f·7264·2041·7474·656d·7074·7320·746f··cord·Attempts·to | ||
| 00000ac0:·20 | 00000ac0:·2041·6c74·6572·204c·6f67·6f6e·2061·6e64···Alter·Logon·and | ||
| 00000ad0:· | 00000ad0:·204c·6f67·6f75·7420·4576·656e·7473·202d···Logout·Events·- | ||
| 00000ae0:·20 | 00000ae0:·2074·616c·6c79·6c6f·673c·2f74·643e·0a20···tallylog</td>.· | ||
| 00000af0:· | 00000af0:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000b00:· | 00000b00:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000b10:· | 00000b10:·2020·2054·6865·2061·7564·6974·2073·7973·····The·audit·sys | ||
| 00000b20:· | 00000b20:·7465·6d20·616c·7265·6164·7920·636f·6c6c··tem·already·coll | ||
| 00000b30:· | 00000b30:·6563·7473·206c·6f67·696e·2069·6e66·6f72··ects·login·infor | ||
| 00000b40:· | 00000b40:·6d61·7469·6f6e·2066·6f72·2061·6c6c·2075··mation·for·all·u | ||
| 00000b50:·7 | 00000b50:·7365·7273·0a61·6e64·2072·6f6f·742e·2049··sers.and·root.·I | ||
| 00000b60:· | 00000b60:·6620·7468·6520·3c74·743e·6175·6469·7464··f·the·<tt>auditd | ||
| 00000b70:· | 00000b70:·3c2f·7474·3e20·6461·656d·6f6e·2069·7320··</tt>·daemon·is· | ||
| 00000b80:· | 00000b80:·636f·6e66·6967·7572·6564·2074·6f20·7573··configured·to·us | ||
| 00000b90:· | 00000b90:·6520·7468·650a·3c74·743e·6175·6765·6e72··e·the.<tt>augenr | ||
| 00000ba0:· | 00000ba0:·756c·6573·3c2f·7474·3e20·7072·6f67·7261··ules</tt>·progra | ||
| 00000bb0:· | 00000bb0:·6d20·746f·2072·6561·6420·6175·6469·7420··m·to·read·audit· | ||
| 00000bc0:· | 00000bc0:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 00000bd0:·6 | 00000bd0:·6d6f·6e20·7374·6172·7475·7020·2874·6865··mon·startup·(the | ||
| Max diff block lines reached; 5660778/7307282 bytes (77.47%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 26 lines modified | Offset 157, 26 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 167 | 166 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | network. | ||
| 168 | ······</td> | 169 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 171 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 172 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | 180 | ······<td>Install·iptables·Package</td> |
| 181 | ······<td·xml:lang="en-US"> | 181 | ······<td·xml:lang="en-US"> |
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| Offset 187, 26 lines modified | Offset 187, 26 lines modified | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering |
| 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP |
| 189 | masquerading,·etc. | 189 | masquerading,·etc. |
| 190 | ······</td> | 190 | ······</td> |
| 191 | ····</tr> | 191 | ····</tr> |
| 192 | ····<tr> | 192 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 194 | ······<td> | 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 195 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 196 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | network. | ||
| 199 | ······</td> | 198 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 199 | ······<td·xml:lang="en-US"> |
| 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | |
| 201 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 205 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 38 lines modified | Offset 246, 28 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 299745/306327 bytes (97.85%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 14 lines modified | Offset 112, 40 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 121 | ····················································································processes·on | ||
| 122 | ····················································································machine·and·is | ||
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 125 | ····················································································system.·The | ||
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 129 | ····················································································network·traffic | ||
| 130 | ····················································································should·be·seen,·all | ||
| 131 | ····················································································other·interfaces | ||
| 132 | ····················································································should·ignore | ||
| 133 | ····················································································traffic·on·this | ||
| 134 | ····················································································network·as·an·anti- | ||
| 135 | ····················································································spoofing·measure. | ||
| 136 | ····················································································iptables·controls | ||
| 137 | ····················································································the·Linux·kernel | ||
| 138 | ····················································································network·packet | ||
| 139 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 140 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 141 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 142 | ····················································································set·up·firewalls | ||
| 143 | ····················································································and·IP | ||
| 144 | ····················································································masquerading,·etc. | ||
| 119 | ····················································································A·TCP·SYN·flood | 145 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 146 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 147 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 148 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 149 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 150 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 151 | ····················································································with·connections·in |
| Offset 138, 40 lines modified | Offset 164, 14 lines modified | ||
| 138 | ····················································································flood·condition·is | 164 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 165 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 166 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 167 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 168 | ····················································································servicing·valid |
| 143 | ····················································································connection | 169 | ····················································································connection |
| 144 | ····················································································requests. | 170 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 156 | ····················································································processes·on | ||
| 157 | ····················································································machine·and·is | ||
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 160 | ····················································································system.·The | ||
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network·traffic | ||
| 165 | ····················································································should·be·seen,·all | ||
| 166 | ····················································································other·interfaces | ||
| 167 | ····················································································should·ignore | ||
| 168 | ····················································································traffic·on·this | ||
| 169 | ····················································································network·as·an·anti- | ||
| Max diff block lines reached; 489095/501697 bytes (97.49%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="202 | 3 | ··<xccdf-1.2:version·time="2026-01-27T23:43:44.704082+00:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 163 lines modified | Offset 72, 163 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="ipv6_enabled"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 99 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_s | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="machine"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="machine_and_mount_var"> | 96 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="package_ | 102 | ····<cpe-lang:platform·id="package_systemd"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> | 107 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_ | 113 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id=" | 118 | ····<cpe-lang:platform·id="package_pam"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 140 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="package_ | 123 | ····<cpe-lang:platform·id="package_audit"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="non-uefi"> | 128 | ····<cpe-lang:platform·id="non-uefi"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 133 | ····<cpe-lang:platform·id="package_chrony"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 138 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-i | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_dnf"> | 143 | ····<cpe-lang:platform·id="package_dnf"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="package_pa | 148 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 155 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 163 | ······</cpe-lang:logical-test> | ||
| 164 | ····</cpe-lang:platform> | ||
| 165 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | ||
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 36642/49636 bytes (73.82%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 69 lines modified | Offset 71, 45 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="ip | 83 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_systemd"> | 89 | ····<cpe-lang:platform·id="package_systemd"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 103 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 121 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="machine_and_package_ava | 104 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_a | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | ||
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 130 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="x86_64_arch"> | 111 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| Offset 144, 125 lines modified | Offset 120, 149 lines modified | ||
| 144 | ········</cpe-lang:logical-test> | 120 | ········</cpe-lang:logical-test> |
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 147 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_ | 127 | ····<cpe-lang:platform·id="package_pam"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | ||
| 155 | ····</cpe-lang:platform> | ||
| 156 | ····<cpe-lang:platform·id="non-uefi"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 132 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="g | 137 | ····<cpe-lang:platform·id="package_audit"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 142 | ····<cpe-lang:platform·id="non-uefi"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 174 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 176 | ········</cpe-lang:logical-test> | ||
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 178 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 179 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 180 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="package_ntp"> |
| 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| Max diff block lines reached; 83222/95581 bytes (87.07%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 69 lines modified | Offset 71, 45 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="ip | 83 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_systemd"> | 89 | ····<cpe-lang:platform·id="package_systemd"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 103 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 121 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="machine_and_package_ava | 104 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_a | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | ||
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 130 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="x86_64_arch"> | 111 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| Offset 144, 113 lines modified | Offset 120, 137 lines modified | ||
| 144 | ········</cpe-lang:logical-test> | 120 | ········</cpe-lang:logical-test> |
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 147 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="wifi-iface"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 132 | ····<cpe-lang:platform·id="package_pam"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 137 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="g | 142 | ····<cpe-lang:platform·id="package_audit"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="non-uefi"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 175 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_gdm"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id="package_ | 157 | ····<cpe-lang:platform·id="package_chrony"> |
| Max diff block lines reached; 81099/93402 bytes (86.83%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 75 lines modified | Offset 71, 56 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="ip | 89 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_systemd"> | 95 | ····<cpe-lang:platform·id="package_systemd"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="uefi"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 109 | ········</cpe-lang:logical-test> | ||
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 112 | ········</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 130 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="machine_and_package_sn | 115 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="x86_64_arch"> | 122 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| Offset 150, 137 lines modified | Offset 131, 156 lines modified | ||
| 150 | ········</cpe-lang:logical-test> | 131 | ········</cpe-lang:logical-test> |
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | 134 | ········</cpe-lang:logical-test> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | ||
| 142 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="package_rsh-server"> | 143 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_ | 148 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | ||
| 157 | ····</cpe-lang:platform> | ||
| 158 | ····<cpe-lang:platform·id="package_audit"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="non-uefi"> | 163 | ····<cpe-lang:platform·id="non-uefi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| Max diff block lines reached; 106547/118835 bytes (89.66%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 75 lines modified | Offset 71, 56 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="ip | 89 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_systemd"> | 95 | ····<cpe-lang:platform·id="package_systemd"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="uefi"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 109 | ········</cpe-lang:logical-test> | ||
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 112 | ········</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 130 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="machine_and_package_sn | 115 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="x86_64_arch"> | 122 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| Offset 150, 137 lines modified | Offset 131, 156 lines modified | ||
| 150 | ········</cpe-lang:logical-test> | 131 | ········</cpe-lang:logical-test> |
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | 134 | ········</cpe-lang:logical-test> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | ||
| 142 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="package_rsh-server"> | 143 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_ | 148 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | ||
| 157 | ····</cpe-lang:platform> | ||
| 158 | ····<cpe-lang:platform·id="package_audit"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="non-uefi"> | 163 | ····<cpe-lang:platform·id="non-uefi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| Max diff block lines reached; 106490/118739 bytes (89.68%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation. | 42 | in·order·to·support·security·automation. |
| 43 | ········<html:br/> | 43 | ········<html:br/> |
| Offset 554, 15 lines modified | Offset 554, 15 lines modified | ||
| 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 555 | ············</xccdf-1.2:check> | 555 | ············</xccdf-1.2:check> |
| 556 | ··········</xccdf-1.2:Rule> | 556 | ··········</xccdf-1.2:Rule> |
| 557 | ········</xccdf-1.2:Group> | 557 | ········</xccdf-1.2:Group> |
| 558 | ······</xccdf-1.2:Group> | 558 | ······</xccdf-1.2:Group> |
| 559 | ····</xccdf-1.2:Benchmark> | 559 | ····</xccdf-1.2:Benchmark> |
| 560 | ··</ds:component> | 560 | ··</ds:component> |
| 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-0 | 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 563 | ······<oval-def:generator> | 563 | ······<oval-def:generator> |
| 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 566 | ········<oval:schema_version>5.11</oval:schema_version> | 566 | ········<oval:schema_version>5.11</oval:schema_version> |
| 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 568 | ······</oval-def:generator> | 568 | ······</oval-def:generator> |
| Offset 591, 74 lines modified | Offset 591, 74 lines modified | ||
| 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 593 | ··········<ind:instance·datatype="int">1</ind:instance> | 593 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 594 | ········</ind:textfilecontent54_object> | 594 | ········</ind:textfilecontent54_object> |
| 595 | ······</oval-def:objects> | 595 | ······</oval-def:objects> |
| 596 | ····</oval-def:oval_definitions> | 596 | ····</oval-def:oval_definitions> |
| 597 | ··</ds:component> | 597 | ··</ds:component> |
| 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-0 | 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 599 | ····<ocil:ocil> | 599 | ····<ocil:ocil> |
| 600 | ······<ocil:generator> | 600 | ······<ocil:generator> |
| 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 603 | ········<ocil:schema_version>2.0</ocil:schema_version> | 603 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 605 | ······</ocil:generator> | 605 | ······</ocil:generator> |
| 606 | ······<ocil:questionnaires> | 606 | ······<ocil:questionnaires> |
| 607 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 608 | ··········<ocil:title>Enable·audit·Service</ocil:title> | ||
| 609 | ··········<ocil:actions> | ||
| 610 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 611 | ··········</ocil:actions> | ||
| 612 | ········</ocil:questionnaire> | ||
| 613 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | 607 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> |
| 614 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | 608 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> |
| 615 | ··········<ocil:actions> | 609 | ··········<ocil:actions> |
| 616 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | 610 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> |
| 617 | ··········</ocil:actions> | 611 | ··········</ocil:actions> |
| 618 | ········</ocil:questionnaire> | 612 | ········</ocil:questionnaire> |
| 613 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 614 | ··········<ocil:title>Enable·audit·Service</ocil:title> | ||
| 615 | ··········<ocil:actions> | ||
| 616 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 617 | ··········</ocil:actions> | ||
| 618 | ········</ocil:questionnaire> | ||
| 619 | ······</ocil:questionnaires> | 619 | ······</ocil:questionnaires> |
| 620 | ······<ocil:test_actions> | 620 | ······<ocil:test_actions> |
| 621 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 621 | ········<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 622 | ··········<ocil:when_true> | 622 | ··········<ocil:when_true> |
| 623 | ············<ocil:result>PASS</ocil:result> | 623 | ············<ocil:result>PASS</ocil:result> |
| 624 | ··········</ocil:when_true> | 624 | ··········</ocil:when_true> |
| 625 | ··········<ocil:when_false> | 625 | ··········<ocil:when_false> |
| 626 | ············<ocil:result>FAIL</ocil:result> | 626 | ············<ocil:result>FAIL</ocil:result> |
| 627 | ··········</ocil:when_false> | 627 | ··········</ocil:when_false> |
| 628 | ········</ocil:boolean_question_test_action> | 628 | ········</ocil:boolean_question_test_action> |
| 629 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 629 | ········<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 630 | ··········<ocil:when_true> | 630 | ··········<ocil:when_true> |
| 631 | ············<ocil:result>PASS</ocil:result> | 631 | ············<ocil:result>PASS</ocil:result> |
| 632 | ··········</ocil:when_true> | 632 | ··········</ocil:when_true> |
| 633 | ··········<ocil:when_false> | 633 | ··········<ocil:when_false> |
| 634 | ············<ocil:result>FAIL</ocil:result> | 634 | ············<ocil:result>FAIL</ocil:result> |
| 635 | ··········</ocil:when_false> | 635 | ··········</ocil:when_false> |
| 636 | ········</ocil:boolean_question_test_action> | 636 | ········</ocil:boolean_question_test_action> |
| 637 | ······</ocil:test_actions> | 637 | ······</ocil:test_actions> |
| 638 | ······<ocil:questions> | 638 | ······<ocil:questions> |
| 639 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 640 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 641 | following·command: | ||
| 642 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 643 | The·output·should·contain·ahlt | ||
| 644 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 645 | ········</ocil:boolean_question> | ||
| 639 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 646 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 640 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 647 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 641 | following·command: | 648 | following·command: |
| 642 | $·sudo·launchctl·list·com.apple.auditd | 649 | $·sudo·launchctl·list·com.apple.auditd |
| 643 | The·output·should·return·process·information·for | 650 | The·output·should·return·process·information·for |
| 644 | com.apple.auditd | 651 | com.apple.auditd |
| 645 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 652 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 646 | ········</ocil:boolean_question> | 653 | ········</ocil:boolean_question> |
| 647 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 648 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 649 | following·command: | ||
| 650 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 651 | The·output·should·contain·ahlt | ||
| 652 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 653 | ········</ocil:boolean_question> | ||
| 654 | ······</ocil:questions> | 654 | ······</ocil:questions> |
| 655 | ····</ocil:ocil> | 655 | ····</ocil:ocil> |
| 656 | ··</ds:component> | 656 | ··</ds:component> |
| 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-0 | 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 659 | ······<oval-def:generator> | 659 | ······<oval-def:generator> |
| 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 662 | ········<oval:schema_version>5.11</oval:schema_version> | 662 | ········<oval:schema_version>5.11</oval:schema_version> |
| Max diff block lines reached; 29/9276 bytes (0.31%) of diff not shown. | |||
| Offset 3, 56 lines modified | Offset 3, 56 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Enable·audit·Service</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | 11 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Enable·audit·Service</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ··</ocil:questionnaires> | 22 | ··</ocil:questionnaires> |
| 23 | ··<ocil:test_actions> | 23 | ··<ocil:test_actions> |
| 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 25 | ······<ocil:when_true> | 25 | ······<ocil:when_true> |
| 26 | ········<ocil:result>PASS</ocil:result> | 26 | ········<ocil:result>PASS</ocil:result> |
| 27 | ······</ocil:when_true> | 27 | ······</ocil:when_true> |
| 28 | ······<ocil:when_false> | 28 | ······<ocil:when_false> |
| 29 | ········<ocil:result>FAIL</ocil:result> | 29 | ········<ocil:result>FAIL</ocil:result> |
| 30 | ······</ocil:when_false> | 30 | ······</ocil:when_false> |
| 31 | ····</ocil:boolean_question_test_action> | 31 | ····</ocil:boolean_question_test_action> |
| 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 33 | ······<ocil:when_true> | 33 | ······<ocil:when_true> |
| 34 | ········<ocil:result>PASS</ocil:result> | 34 | ········<ocil:result>PASS</ocil:result> |
| 35 | ······</ocil:when_true> | 35 | ······</ocil:when_true> |
| 36 | ······<ocil:when_false> | 36 | ······<ocil:when_false> |
| 37 | ········<ocil:result>FAIL</ocil:result> | 37 | ········<ocil:result>FAIL</ocil:result> |
| 38 | ······</ocil:when_false> | 38 | ······</ocil:when_false> |
| 39 | ····</ocil:boolean_question_test_action> | 39 | ····</ocil:boolean_question_test_action> |
| 40 | ··</ocil:test_actions> | 40 | ··</ocil:test_actions> |
| 41 | ··<ocil:questions> | 41 | ··<ocil:questions> |
| 42 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 44 | following·command: | ||
| 45 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 46 | The·output·should·contain·ahlt | ||
| 47 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 48 | ····</ocil:boolean_question> | ||
| 42 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 49 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 50 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 44 | following·command: | 51 | following·command: |
| 45 | $·sudo·launchctl·list·com.apple.auditd | 52 | $·sudo·launchctl·list·com.apple.auditd |
| 46 | The·output·should·return·process·information·for | 53 | The·output·should·return·process·information·for |
| 47 | com.apple.auditd | 54 | com.apple.auditd |
| 48 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 55 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 49 | ····</ocil:boolean_question> | 56 | ····</ocil:boolean_question> |
| 50 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 51 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 52 | following·command: | ||
| 53 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 54 | The·output·should·contain·ahlt | ||
| 55 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 56 | ····</ocil:boolean_question> | ||
| 57 | ··</ocil:questions> | 57 | ··</ocil:questions> |
| 58 | </ocil:ocil> | 58 | </ocil:ocil> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation. | 9 | in·order·to·support·security·automation. |
| 10 | ····<html:br/> | 10 | ····<html:br/> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 30 lines modified | Offset 72, 46 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="ocp4-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="ocp4-master-node"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 99 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 83 | ········</cpe-lang:logical-test> | 103 | ········</cpe-lang:logical-test> |
| 84 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 104 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 88 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> | ||
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | ||
| 94 | ····</cpe-lang:platform> | ||
| 95 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.9"> | 111 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.9"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 99 | ········</cpe-lang:logical-test> | 115 | ········</cpe-lang:logical-test> |
| 100 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 116 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> |
| Offset 105, 163 lines modified | Offset 121, 147 lines modified | ||
| 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> | 121 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> |
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> |
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 109 | ········</cpe-lang:logical-test> | 125 | ········</cpe-lang:logical-test> |
| 110 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 111 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 112 | ····<cpe-lang:platform·id="ocp4-on- | 128 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 132 | ········</cpe-lang:logical-test> | ||
| 133 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4 | 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> | ||
| 136 | ········</cpe-lang:logical-test> | ||
| 115 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 116 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 117 | ····<cpe-lang:platform·id="ocp4-on- | 139 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> | ||
| 120 | ······</cpe-lang:logical-test> | ||
| 121 | ····</cpe-lang:platform> | ||
| 122 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_o | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id="ocp4-node"> | 144 | ····<cpe-lang:platform·id="ocp4-node-on-ovn"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> |
| 130 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="ocp4. | 149 | ····<cpe-lang:platform·id="ocp4.10_or_ocp4.8_or_ocp4.9"> |
| 133 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 137 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="ocp4-on-gcp"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 143 | ········</cpe-lang:logical-test> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="ocp4-n | 161 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="ocp4.1 | 166 | ····<cpe-lang:platform·id="ocp4.16"> |
| 153 | ······<cpe-lang:logical-test·operator=" | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_1 | 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | 169 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 170 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> | 171 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| Max diff block lines reached; 12970/26509 bytes (48.93%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-7"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-7"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·7</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·7</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·7.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·7.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 414 lines modified | Offset 72, 414 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="package_net-snmp"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="i | 89 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-i | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 105 | ······</cpe-lang:logical-test> | ||
| 106 | ····</cpe-lang:platform> | ||
| 107 | ····<cpe-lang:platform·id="selinux"> | ||
| 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="package_systemd"> | 112 | ····<cpe-lang:platform·id="package_systemd"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id=" | 117 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 118 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 123 | ····<cpe-lang:platform·id="uefi"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 128 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang: | 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 132 | ········</cpe-lang:logical-test> | ||
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 135 | ········</cpe-lang:logical-test> | ||
| 129 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="machine_and_ | 138 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-p | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 140 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_c | 155 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 159 | ········</cpe-lang:logical-test> | ||
| 160 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 161 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 162 | ········</cpe-lang:logical-test> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="no | 166 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 172 | ····<cpe-lang:platform·id="wifi-iface"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 162 | ······</cpe-lang:logical-test> | ||
| 163 | ····</cpe-lang:platform> | ||
| 164 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 165 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| Max diff block lines reached; 350191/364533 bytes (96.07%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 461 lines modified | Offset 72, 461 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="package_net-snmp"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="i | 89 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-i | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 107 | ····<cpe-lang:platform·id="selinux"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_s | 112 | ····<cpe-lang:platform·id="package_systemd"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_s | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="machine_and_ | 117 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-p | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id=" | 123 | ····<cpe-lang:platform·id="os_linux_ol_le_8_4_or_not_runtime_kernel_fips_enabled"> |
| 127 | ······<cpe-lang:logical-test·operator=" | 124 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-runtime_kernel_fips_enabled:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | ||
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_le_8_4:def:1"/> |
| 130 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="uefi"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="machine_and_ | 136 | ····<cpe-lang:platform·id="machine_and_not_kernel_uek_or_not_secure_boot"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-kernel_uek:def:1"/> | ||
| 141 | ··········</cpe-lang:logical-test> | ||
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-secure_boot_enabled:def:1"/> | ||
| 144 | ··········</cpe-lang:logical-test> | ||
| 145 | ········</cpe-lang:logical-test> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="package_c | 149 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 153 | ········</cpe-lang:logical-test> | ||
| 154 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 155 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 156 | ········</cpe-lang:logical-test> | ||
| 146 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id=" | 159 | ····<cpe-lang:platform·id="machine_and_uefi"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="machine_and_package_ava | 165 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_a | 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 159 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 160 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="x86_64_arch"> | 172 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | 175 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 176 | ····</cpe-lang:platform> |
| Max diff block lines reached; 404405/419907 bytes (96.31%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-9"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-9"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·9</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·9</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·9.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·9.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 410 lines modified | Offset 72, 410 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="i | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-i | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id=" | 96 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 102 | ····<cpe-lang:platform·id="selinux"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_s | 107 | ····<cpe-lang:platform·id="package_systemd"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_s | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="machine_and_ | 112 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-p | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id=" | 118 | ····<cpe-lang:platform·id="uefi"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | ||
| 130 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="package_f | 123 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 130 | ········</cpe-lang:logical-test> | ||
| 135 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="machine_and_ | 133 | ····<cpe-lang:platform·id="machine_and_uefi"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | ||
| 142 | ····</cpe-lang:platform> | ||
| 143 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="not_s390x_arch"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="machine_and_package_ava | 139 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_a | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 159 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 160 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="x86_64_arch"> | 146 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id="s | 151 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> | ||
| 173 | ······</cpe-lang:logical-test> | ||
| 174 | ····</cpe-lang:platform> | ||
| 175 | ····<cpe-lang:platform·id="package_libreswan"> | ||
| 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | ||
| 178 | ······</cpe-lang:logical-test> | ||
| 179 | ····</cpe-lang:platform> | ||
| 180 | ····<cpe-lang:platform·id="package_polkit"> | ||
| Max diff block lines reached; 341738/354917 bytes (96.29%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 75 lines modified | Offset 71, 51 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="ip | 89 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_systemd"> | 95 | ····<cpe-lang:platform·id="package_systemd"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 103 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 121 | ······</cpe-lang:logical-test> | ||
| 122 | ····</cpe-lang:platform> | ||
| 123 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | ||
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 107 | ········</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 130 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="machine_and_package_sn | 110 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="x86_64_arch"> | 117 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| Offset 150, 121 lines modified | Offset 126, 145 lines modified | ||
| 150 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | 129 | ········</cpe-lang:logical-test> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 136 | ······</cpe-lang:logical-test> | ||
| 137 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="package_rsh-server"> | 138 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_ | 143 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | ||
| 152 | ····</cpe-lang:platform> | ||
| 153 | ····<cpe-lang:platform·id="package_audit"> | ||
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 165 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="non-uefi"> | 158 | ····<cpe-lang:platform·id="non-uefi"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 94291/106260 bytes (88.74%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 112, 144 lines modified | Offset 112, 144 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 122 | ··········</cpe-lang:logical-test> | ||
| 123 | ········</cpe-lang:platform> | ||
| 124 | ········<cpe-lang:platform·id=" | 119 | ········<cpe-lang:platform·id="machine"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 127 | ··········</cpe-lang:logical-test> | ||
| 128 | ········</cpe-lang:platform> | ||
| 129 | ········<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> | ||
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 134 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 135 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 136 | ········<cpe-lang:platform·id=" | 124 | ········<cpe-lang:platform·id="machine_and_package_avahi"> |
| 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 139 | ··········</cpe-lang:logical-test> | 128 | ··········</cpe-lang:logical-test> |
| 140 | ········</cpe-lang:platform> | 129 | ········</cpe-lang:platform> |
| 141 | ········<cpe-lang:platform·id=" | 130 | ········<cpe-lang:platform·id="uefi"> |
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 144 | ··········</cpe-lang:logical-test> | 133 | ··········</cpe-lang:logical-test> |
| 145 | ········</cpe-lang:platform> | 134 | ········</cpe-lang:platform> |
| 146 | ········<cpe-lang:platform·id="package_c | 135 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 138 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 139 | ············</cpe-lang:logical-test> | ||
| 140 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 141 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 142 | ············</cpe-lang:logical-test> | ||
| 149 | ··········</cpe-lang:logical-test> | 143 | ··········</cpe-lang:logical-test> |
| 150 | ········</cpe-lang:platform> | 144 | ········</cpe-lang:platform> |
| 151 | ········<cpe-lang:platform·id="machine_and_package_ava | 145 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 155 | ··········</cpe-lang:logical-test> | ||
| 156 | ········</cpe-lang:platform> | ||
| 157 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 161 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 162 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 152 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 166 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 167 | ············</cpe-lang:logical-test> | 156 | ············</cpe-lang:logical-test> |
| 168 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 169 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 170 | ············</cpe-lang:logical-test> | 159 | ············</cpe-lang:logical-test> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 172 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 173 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 174 | ········<cpe-lang:platform·id="package_ | 163 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 177 | ··········</cpe-lang:logical-test> | 167 | ··········</cpe-lang:logical-test> |
| 178 | ········</cpe-lang:platform> | 168 | ········</cpe-lang:platform> |
| 179 | ········<cpe-lang:platform·id=" | 169 | ········<cpe-lang:platform·id="wifi-iface"> |
| 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 172 | ··········</cpe-lang:logical-test> | ||
| 173 | ········</cpe-lang:platform> | ||
| 174 | ········<cpe-lang:platform·id="package_pam"> | ||
| 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 177 | ··········</cpe-lang:logical-test> | ||
| 178 | ········</cpe-lang:platform> | ||
| 179 | ········<cpe-lang:platform·id="package_audit"> | ||
| 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 182 | ··········</cpe-lang:logical-test> | 182 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 183 | ········</cpe-lang:platform> |
| 184 | ········<cpe-lang:platform·id="non-uefi"> | 184 | ········<cpe-lang:platform·id="non-uefi"> |
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 187 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| Max diff block lines reached; 614917/627490 bytes (98.00%) of diff not shown. | |||
| Offset 3, 2757 lines modified | Offset 3, 2757 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_issue_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Group·Ownership·of·System·Login·Banner</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_issue_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_sctp_disabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 11 | ······<ocil:title>Disable·SCTP·Support</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_sctp_disabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 23 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_chown_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Record·Successful·Ownership·Changes·to·Files·-·chown</ocil:title> | ||
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_chown_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_clock_settime_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_action_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Configure·auditd·admin_space_left·Action·on·Low·Disk·Space</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-audit_r | 25 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_admin_space_left_action_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_percentage_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Configure·auditd·admin_space_left·on·Low·Disk·Space</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_admin_space_left_percentage_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudo_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·Kernel·Parameter·for·Accepting·Secure·Redirects·By·Default</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify·Group·Who·Owns· | 41 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ | 43 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> | ||
| 53 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_logging_configured_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·logging·is·configured</ocil:title> | ||
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_logging_configured_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·No·World-Writable·Files·Exist</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_world_writable_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-account | 58 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_name_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·Names</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-account | 61 | ········<ocil:test_action_ref>ocil:ssg-account_unique_name_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_minimum_age_login_defs_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Set·Password·Minimum·Age</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_minimum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-a | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dictcheck_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Prevent·the·Use·of·Dictionary·Words</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-a | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dictcheck_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-ntpd_configure_restrictions_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Configure·server·restrictions·for·ntpd</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-ntpd_configure_restrictions_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_passwordauth_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Set·PAM''s·Password·Hashing·Algorithm·-·password-auth</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_passwordauth_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_symlinks_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Symlinks</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_symlinks_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_shadow_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·User</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-no_files_unowned_by_user_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_named_disabled_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Disable·named·Service</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_named_disabled_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>The·operating·system·must·restrict·privilege·elevation·to·authorized·personnel</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_id_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·ID</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-group_unique_id_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 536216/548681 bytes (97.73%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 144 lines modified | Offset 71, 144 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="uefi"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="package_c | 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 108 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="machine_and_package_ava | 104 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 120 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 122 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 111 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | 115 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 129 | ········</cpe-lang:logical-test> | 118 | ········</cpe-lang:logical-test> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 131 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="package_ | 122 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 136 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id=" | 128 | ····<cpe-lang:platform·id="wifi-iface"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 131 | ······</cpe-lang:logical-test> | ||
| 132 | ····</cpe-lang:platform> | ||
| 133 | ····<cpe-lang:platform·id="package_pam"> | ||
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 136 | ······</cpe-lang:logical-test> | ||
| 137 | ····</cpe-lang:platform> | ||
| 138 | ····<cpe-lang:platform·id="package_audit"> | ||
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="non-uefi"> | 143 | ····<cpe-lang:platform·id="non-uefi"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id=" | 148 | ····<cpe-lang:platform·id="package_ntp"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="gr | 153 | ····<cpe-lang:platform·id="package_chrony"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | ||
| 157 | ····</cpe-lang:platform> | ||
| 158 | ····<cpe-lang:platform·id="ipv6_enabled"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="package_dnf"> | 163 | ····<cpe-lang:platform·id="package_dnf"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 161 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 36410/49029 bytes (74.26%) of diff not shown. | |||
| Offset 3, 2113 lines modified | Offset 3, 2113 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·Core·Dumps·for·SUID·programs</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_suid_dumpable_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_on_oops_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Kernel·panic·oops</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_on_oops_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-config | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_table_isolation_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Remove·the·kernel·mapping·in·user·mode</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-config | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_table_isolation_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_pub_key_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-package_rsyslog_installed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·rsyslog·is·Installed</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-package_rsyslog_installed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-display_login_attempts_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_dmesg_restrict_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_backtraces_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable· | 47 | ······<ocil:title>Disable·core·dump·backtraces</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_backtraces_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_messages_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify· | 53 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/messages·File</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchown_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchown</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchown_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_profile_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·/etc/profile</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_profile_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_acpi_custom_method_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Do·not·allow·ACPI·methods·to·be·inserted/replaced·at·run·time</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_acpi_custom_method_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·No·World-Writable·Files·Exist</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_world_writable_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Di | 83 | ······<ocil:title>Set·Default·iptables·Policy·for·Incoming·Packets</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-set_iptables_default_rule_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_srv_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·/srv·Located·On·Separate·Partition</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-partition_for_srv_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Enable·seccomp·to·safely·compute·untrusted·bytecode</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_freq_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-auditd_freq_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_acpi_custom_method_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sysadmin_actions_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·auditd·Collects·System·Administrator·Actions</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_sysadmin_actions_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_slub_debug_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>En | 113 | ······<ocil:title>Enable·SLUB·debugging·support</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_slub_debug_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chown_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_removed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Remove·the·OpenSSH·Server·Package</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_removed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 649041/661624 bytes (98.10%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 53 lines modified | Offset 71, 39 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_systemd"> | 83 | ····<cpe-lang:platform·id="package_systemd"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 98 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 92 | ········</cpe-lang:logical-test> | ||
| 93 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 94 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 95 | ········</cpe-lang:logical-test> | ||
| 106 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_c | 98 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 114 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="x86_64_arch"> | 105 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| Offset 133, 80 lines modified | Offset 119, 94 lines modified | ||
| 133 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_rsh-server"> | 121 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_ | 126 | ····<cpe-lang:platform·id="package_pam"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="machine"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_audit"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_u | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="package_ | 141 | ····<cpe-lang:platform·id="package_gdm"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="package_chrony"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id="package_logrotate"> | 151 | ····<cpe-lang:platform·id="package_logrotate"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id="package_ | 156 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 179 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 180 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 181 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 164 | ······</cpe-lang:logical-test> | ||
| 165 | ····</cpe-lang:platform> | ||
| 166 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 182 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 47381/59959 bytes (79.02%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 336 lines modified | Offset 71, 336 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="i | 83 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-i | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_systemd"> | 95 | ····<cpe-lang:platform·id="package_systemd"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="rhcos4-rhel9"> | ||
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="machine_and_ | 100 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 106 | ····<cpe-lang:platform·id="uefi"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | ||
| 139 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_c | 121 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | ||
| 145 | ····</cpe-lang:platform> | ||
| 146 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 147 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="x86_64_arch"> | 128 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> | ||
| 157 | ····<cpe-lang:platform·id="krb5_server_older_than_1_17-18_and_krb5_workstation_older_than_1_17-18"> | ||
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-krb5_server_older_than_1_17_18:def:1"/> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-krb5_workstation_older_than_1_17_18:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | ||
| 162 | ····</cpe-lang:platform> | ||
| 163 | ····<cpe-lang:platform·id="package_libreswan"> | ||
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 138 | ····<cpe-lang:platform·id="rhcos4-rhel9"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 143 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 176 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 177 | ········</cpe-lang:logical-test> | 147 | ········</cpe-lang:logical-test> |
| 178 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 179 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| Max diff block lines reached; 38627/51592 bytes (74.87%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHV-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHV-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Virtualization·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Virtualization·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Virtualization·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Virtualization·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 292 lines modified | Offset 71, 292 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="selinux"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-i | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_systemd"> | 94 | ····<cpe-lang:platform·id="package_systemd"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> | ||
| 103 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="machine_and_package_telnet-server"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-p | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="uefi"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_f | 110 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 117 | ········</cpe-lang:logical-test> | ||
| 128 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_c | 120 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | ||
| 134 | ····</cpe-lang:platform> | ||
| 135 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 136 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="x86_64_arch"> | 127 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="selinux"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="package_polkit"> | ||
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_polkit:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | ||
| 155 | ····</cpe-lang:platform> | ||
| 156 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 132 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 160 | ········</cpe-lang:logical-test> | 136 | ········</cpe-lang:logical-test> |
| 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 163 | ········</cpe-lang:logical-test> | 139 | ········</cpe-lang:logical-test> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 143 | ····<cpe-lang:platform·id="package_polkit"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_polkit:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id=" | 148 | ····<cpe-lang:platform·id="wifi-iface"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_opt:def:1"/> | ||
| 177 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| Max diff block lines reached; 240148/252723 bytes (95.02%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·12.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·12.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 359 lines modified | Offset 72, 359 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="machine"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="i | 90 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-i | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 96 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id=" | 102 | ····<cpe-lang:platform·id="machine_and_mount_var"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 108 | ····<cpe-lang:platform·id="selinux"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_ | 113 | ····<cpe-lang:platform·id="package_systemd"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 118 | ····<cpe-lang:platform·id="uefi"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_ | 123 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 130 | ········</cpe-lang:logical-test> | ||
| 128 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="machine_and_ | 133 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_c | 150 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 154 | ········</cpe-lang:logical-test> | ||
| 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 157 | ········</cpe-lang:logical-test> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="no | 161 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="wifi-iface"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 172 | ····<cpe-lang:platform·id="package_pam_apparmor"> |
| 164 | ······<cpe-lang:logical-test·operator=" | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_pam_apparmor:def:1"/> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 167 | ······</cpe-lang:logical-test> | 175 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 176 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 177 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_s | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| Max diff block lines reached; 179023/194154 bytes (92.21%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-15"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-15"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·15.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 387 lines modified | Offset 72, 387 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine_and_package_snmpd"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ········ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········ | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="machine"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="i | 90 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-i | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 96 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 100 | ······</cpe-lang:logical-test> | ||
| 101 | ····</cpe-lang:platform> | ||
| 102 | ····<cpe-lang:platform·id="machine_and_mount_var"> | ||
| 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="selinux"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="package_systemd"> | 113 | ····<cpe-lang:platform·id="package_systemd"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 118 | ····<cpe-lang:platform·id="uefi"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 130 | ········</cpe-lang:logical-test> | ||
| 131 | ······</cpe-lang:logical-test> | ||
| 132 | ····</cpe-lang:platform> | ||
| 115 | ····<cpe-lang:platform·id="machine_and_package_ | 133 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 120 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 122 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_telnet-server:def:1"/> | ||
| 131 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="package_ | 150 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 154 | ········</cpe-lang:logical-test> | ||
| 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 157 | ········</cpe-lang:logical-test> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 136 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id="package_firewalld"> | 167 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 147 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id=" | 173 | ····<cpe-lang:platform·id="wifi-iface"> |
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 153 | ······</cpe-lang:logical-test> | 176 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 177 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_ | 178 | ····<cpe-lang:platform·id="package_pam_apparmor"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_pam_apparmor:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 181 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 198565/212810 bytes (93.31%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 19 lines modified | Offset 116, 14 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 128 | ········<cpe-lang:platform·id="machine"> | 123 | ········<cpe-lang:platform·id="machine"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_pam"> | 128 | ········<cpe-lang:platform·id="package_pam"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Offset 136, 14 lines modified | Offset 131, 19 lines modified | ||
| 136 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id="package_audit"> | 133 | ········<cpe-lang:platform·id="package_audit"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 141 | ··········</cpe-lang:logical-test> | ||
| 142 | ········</cpe-lang:platform> | ||
| 143 | ······</cpe-lang:platform-specification> | 143 | ······</cpe-lang:platform-specification> |
| 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| 148 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 148 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 149 | ······<xccdf-1.2:metadata> | 149 | ······<xccdf-1.2:metadata> |
| Offset 1382, 31 lines modified | Offset 1382, 31 lines modified | ||
| 1382 | ············</xccdf-1.2:description> | 1382 | ············</xccdf-1.2:description> |
| 1383 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> | 1383 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> |
| 1384 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> | 1384 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> |
| 1385 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> | 1385 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> |
| 1386 | ············<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. | 1386 | ············<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. |
| 1387 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> | 1387 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> |
| 1388 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> | 1388 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> |
| 1389 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1390 | name·=·"policycoreutils-python-utils" | ||
| 1391 | version·=·"*"</xccdf-1.2:fix> | ||
| 1389 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed | 1392 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed |
| 1390 | ··package: | 1393 | ··package: |
| 1391 | ····name:·policycoreutils-python-utils | 1394 | ····name:·policycoreutils-python-utils |
| 1392 | ····state:·present | 1395 | ····state:·present |
| 1393 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1396 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1394 | ··tags: | 1397 | ··tags: |
| 1395 | ··-·CCE-94091-6 | 1398 | ··-·CCE-94091-6 |
| 1396 | ··-·DISA-STIG-SLEM-05-654220 | 1399 | ··-·DISA-STIG-SLEM-05-654220 |
| 1397 | ··-·enable_strategy | 1400 | ··-·enable_strategy |
| 1398 | ··-·low_complexity | 1401 | ··-·low_complexity |
| 1399 | ··-·low_disruption | 1402 | ··-·low_disruption |
| 1400 | ··-·medium_severity | 1403 | ··-·medium_severity |
| 1401 | ··-·no_reboot_needed | 1404 | ··-·no_reboot_needed |
| 1402 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> | 1405 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> |
| 1403 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1404 | name·=·"policycoreutils-python-utils" | ||
| 1405 | version·=·"*"</xccdf-1.2:fix> | ||
| 1406 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils | 1406 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils |
| 1407 | class·install_policycoreutils-python-utils·{ | 1407 | class·install_policycoreutils-python-utils·{ |
| 1408 | ··package·{·'policycoreutils-python-utils': | 1408 | ··package·{·'policycoreutils-python-utils': |
| 1409 | ····ensure·=>·'installed', | 1409 | ····ensure·=>·'installed', |
| 1410 | ··} | 1410 | ··} |
| 1411 | }</xccdf-1.2:fix> | 1411 | }</xccdf-1.2:fix> |
| Offset 1446, 31 lines modified | Offset 1446, 31 lines modified | ||
| 1446 | ··············<html:code>setfiles</html:code> | 1446 | ··············<html:code>setfiles</html:code> |
| 1447 | ··············to·label·filesystems, | 1447 | ··············to·label·filesystems, |
| 1448 | ··············<html:code>newrole</html:code> | 1448 | ··············<html:code>newrole</html:code> |
| 1449 | ··············to | 1449 | ··············to |
| 1450 | switch·roles,·and·so·on. | 1450 | switch·roles,·and·so·on. |
| 1451 | ············</xccdf-1.2:rationale> | 1451 | ············</xccdf-1.2:rationale> |
| 1452 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> | 1452 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> |
| 1453 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1454 | name·=·"policycoreutils" | ||
| 1455 | version·=·"*"</xccdf-1.2:fix> | ||
| 1453 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed | 1456 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed |
| 1454 | ··package: | 1457 | ··package: |
| 1455 | ····name:·policycoreutils | 1458 | ····name:·policycoreutils |
| 1456 | ····state:·present | 1459 | ····state:·present |
| 1457 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1460 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1458 | ··tags: | 1461 | ··tags: |
| 1459 | ··-·CCE-94097-3 | 1462 | ··-·CCE-94097-3 |
| 1460 | ··-·DISA-STIG-SLEM-05-431010 | 1463 | ··-·DISA-STIG-SLEM-05-431010 |
| Max diff block lines reached; 109355/118466 bytes (92.31%) of diff not shown. | |||
| Offset 3, 1033 lines modified | Offset 3, 1033 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfacl_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_selinux_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>An·SELinux·Context·must·be·configured·for·default·pam_tally2·file·option</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-au | 13 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_file_selinux_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_rm_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Record·Any·Attempts·to·Run·rm</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_rm_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-a | 22 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_vendor_supported_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>The·Installed·Operating·System·Is·Vendor·Supported</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-a | 25 | ········<ocil:test_action_ref>ocil:ssg-installed_OS_is_vendor_supported_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_passwd_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ena | 29 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/passwd</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_passwd_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setsebool_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Record·Any·Attempts·to·Run·setsebool</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setsebool_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_c | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_crontab_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·c | 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·crontab</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_c | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_crontab_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·unix_chkpwd</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faildelay_delay_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Enforce·Delay·After·Failed·Logon·Attempts</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-ss | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faildelay_delay_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_insmod_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·insmod</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_insmod_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-se | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-se | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_s | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_usermod_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·s | 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·usermod</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_s | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_usermod_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_selinux_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_modprobe_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·modprobe</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-a | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_modprobe_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_crontab_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·the·default·plugins·for·the·audit·dispatcher·are·Installed</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-a | 85 | ········<ocil:test_action_ref>ocil:ssg-package_audit-audispd-plugins_installed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chcon_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Record·Any·Attempts·to·Run·chcon</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_chcon_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_rmmod_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·rmmod</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_rmmod_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chsh_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chsh</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chsh_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudoedit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 107 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudoedit</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudoedit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 113 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·kmod</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_kmod_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_agent_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Record·Any·Attempts·to·Run·ssh-agent</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ssh_agent_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 84964/98590 bytes (86.18%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 19 lines modified | Offset 71, 14 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="machine"> | 78 | ····<cpe-lang:platform·id="machine"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_pam"> | 83 | ····<cpe-lang:platform·id="package_pam"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Offset 91, 14 lines modified | Offset 86, 19 lines modified | ||
| 91 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_audit"> | 88 | ····<cpe-lang:platform·id="package_audit"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 98 | ··</cpe-lang:platform-specification> | 98 | ··</cpe-lang:platform-specification> |
| 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| 103 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 103 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 104 | ··<xccdf-1.2:metadata> | 104 | ··<xccdf-1.2:metadata> |
| Offset 1337, 31 lines modified | Offset 1337, 31 lines modified | ||
| 1337 | ········</xccdf-1.2:description> | 1337 | ········</xccdf-1.2:description> |
| 1338 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> | 1338 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> |
| 1339 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> | 1339 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> |
| 1340 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> | 1340 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> |
| 1341 | ········<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. | 1341 | ········<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. |
| 1342 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> | 1342 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> |
| 1343 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> | 1343 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> |
| 1344 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1345 | name·=·"policycoreutils-python-utils" | ||
| 1346 | version·=·"*"</xccdf-1.2:fix> | ||
| 1344 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed | 1347 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed |
| 1345 | ··package: | 1348 | ··package: |
| 1346 | ····name:·policycoreutils-python-utils | 1349 | ····name:·policycoreutils-python-utils |
| 1347 | ····state:·present | 1350 | ····state:·present |
| 1348 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1351 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1349 | ··tags: | 1352 | ··tags: |
| 1350 | ··-·CCE-94091-6 | 1353 | ··-·CCE-94091-6 |
| 1351 | ··-·DISA-STIG-SLEM-05-654220 | 1354 | ··-·DISA-STIG-SLEM-05-654220 |
| 1352 | ··-·enable_strategy | 1355 | ··-·enable_strategy |
| 1353 | ··-·low_complexity | 1356 | ··-·low_complexity |
| 1354 | ··-·low_disruption | 1357 | ··-·low_disruption |
| 1355 | ··-·medium_severity | 1358 | ··-·medium_severity |
| 1356 | ··-·no_reboot_needed | 1359 | ··-·no_reboot_needed |
| 1357 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> | 1360 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> |
| 1358 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1359 | name·=·"policycoreutils-python-utils" | ||
| 1360 | version·=·"*"</xccdf-1.2:fix> | ||
| 1361 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils | 1361 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils |
| 1362 | class·install_policycoreutils-python-utils·{ | 1362 | class·install_policycoreutils-python-utils·{ |
| 1363 | ··package·{·'policycoreutils-python-utils': | 1363 | ··package·{·'policycoreutils-python-utils': |
| 1364 | ····ensure·=>·'installed', | 1364 | ····ensure·=>·'installed', |
| 1365 | ··} | 1365 | ··} |
| 1366 | }</xccdf-1.2:fix> | 1366 | }</xccdf-1.2:fix> |
| Offset 1401, 31 lines modified | Offset 1401, 31 lines modified | ||
| 1401 | ··········<html:code>setfiles</html:code> | 1401 | ··········<html:code>setfiles</html:code> |
| 1402 | ··········to·label·filesystems, | 1402 | ··········to·label·filesystems, |
| 1403 | ··········<html:code>newrole</html:code> | 1403 | ··········<html:code>newrole</html:code> |
| 1404 | ··········to | 1404 | ··········to |
| 1405 | switch·roles,·and·so·on. | 1405 | switch·roles,·and·so·on. |
| 1406 | ········</xccdf-1.2:rationale> | 1406 | ········</xccdf-1.2:rationale> |
| 1407 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> | 1407 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> |
| 1408 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1409 | name·=·"policycoreutils" | ||
| 1410 | version·=·"*"</xccdf-1.2:fix> | ||
| 1408 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed | 1411 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed |
| 1409 | ··package: | 1412 | ··package: |
| 1410 | ····name:·policycoreutils | 1413 | ····name:·policycoreutils |
| 1411 | ····state:·present | 1414 | ····state:·present |
| 1412 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1415 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1413 | ··tags: | 1416 | ··tags: |
| 1414 | ··-·CCE-94097-3 | 1417 | ··-·CCE-94097-3 |
| 1415 | ··-·DISA-STIG-SLEM-05-431010 | 1418 | ··-·DISA-STIG-SLEM-05-431010 |
| 1416 | ··-·enable_strategy | 1419 | ··-·enable_strategy |
| 1417 | ··-·low_complexity | 1420 | ··-·low_complexity |
| 1418 | ··-·low_disruption | 1421 | ··-·low_disruption |
| 1419 | ··-·low_severity | 1422 | ··-·low_severity |
| 1420 | ··-·no_reboot_needed | 1423 | ··-·no_reboot_needed |
| 1421 | ··-·package_policycoreutils_installed</xccdf-1.2:fix> | 1424 | ··-·package_policycoreutils_installed</xccdf-1.2:fix> |
| 1422 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1423 | name·=·"policycoreutils" | ||
| 1424 | version·=·"*"</xccdf-1.2:fix> | ||
| 1425 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils | 1425 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils |
| 1426 | class·install_policycoreutils·{ | 1426 | class·install_policycoreutils·{ |
| 1427 | ··package·{·'policycoreutils': | 1427 | ··package·{·'policycoreutils': |
| 1428 | ····ensure·=>·'installed', | 1428 | ····ensure·=>·'installed', |
| 1429 | ··} | 1429 | ··} |
| 1430 | }</xccdf-1.2:fix> | 1430 | }</xccdf-1.2:fix> |
| Offset 3690, 14 lines modified | Offset 3690, 17 lines modified | ||
| 3690 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-10.5.3</xccdf-1.2:reference> | 3690 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-10.5.3</xccdf-1.2:reference> |
| 3691 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000342-GPOS-00133</xccdf-1.2:reference> | 3691 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000342-GPOS-00133</xccdf-1.2:reference> |
| 3692 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">10.3.3</xccdf-1.2:reference> | 3692 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">10.3.3</xccdf-1.2:reference> |
| 3693 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-653025</xccdf-1.2:reference> | 3693 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-653025</xccdf-1.2:reference> |
| 3694 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261413r996652_rule</xccdf-1.2:reference> | 3694 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261413r996652_rule</xccdf-1.2:reference> |
| 3695 | ······<xccdf-1.2:rationale>Information·stored·in·one·location·is·vulnerable·to·accidental·or·incidental·deletion·or·alteration.·Off-loading·is·a·common·process·in·information·systems·with·limited·audit·storage·capacity.</xccdf-1.2:rationale> | 3695 | ······<xccdf-1.2:rationale>Information·stored·in·one·location·is·vulnerable·to·accidental·or·incidental·deletion·or·alteration.·Off-loading·is·a·common·process·in·information·systems·with·limited·audit·storage·capacity.</xccdf-1.2:rationale> |
| Max diff block lines reached; 1414/10341 bytes (13.67%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2026-01-28">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 53 lines modified | Offset 71, 39 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 84 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 85 | ········</cpe-lang:logical-test> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_systemd"> | 83 | ····<cpe-lang:platform·id="package_systemd"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 98 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 92 | ········</cpe-lang:logical-test> | ||
| 93 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 94 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 95 | ········</cpe-lang:logical-test> | ||
| 106 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_c | 98 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 114 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="x86_64_arch"> | 105 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| Offset 133, 96 lines modified | Offset 119, 110 lines modified | ||
| 133 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_rsh-server"> | 121 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_ | 126 | ····<cpe-lang:platform·id="package_pam"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="machine"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_audit"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_u | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="package_ | 141 | ····<cpe-lang:platform·id="package_gdm"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="package_chrony"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id="package_logrotate"> | 151 | ····<cpe-lang:platform·id="package_logrotate"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id="package_ | 156 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 179 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 180 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 181 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="package_bind"> |
| 182 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 185 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 186 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 187 | ····<cpe-lang:platform·id=" | 166 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| Max diff block lines reached; 61785/74238 bytes (83.23%) of diff not shown. | |||